Effective Date: March 23, 2020

Last Updated: May 1, 2024

This Privacy Notice for California Residents (“Notice”) supplements the information contained in the Privacy Policy of Not the Bee, LLC (the “Company”), and applies solely to all visitors, users, and others who reside in the State of California (“consumers” or “you”). We have adopted this Notice to comply with the California Consumer Privacy Act of 2018, as may be amended from time to time (“CCPA”), including the California Privacy Rights Act (“CPRA”), and any terms defined in the CCPA have the same meaning when used in this Notice.

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“Personal Information”). Personal Information does not include:

• Publicly available information from government records.
• De-identified or aggregated consumer information.
• Information excluded from the CCPA’s and CPRA’s scope, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the California Confidentiality of Medical Information Act (“CMIA”) or clinical trial data, or other qualifying research data;
  • Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (“FCRA”), the Gramm-Leach-Bliley Act (“GLBA”) or California Financial Information Privacy Act (“FIPA”), and the Driver’s Privacy Protection Act of 1994;
  • protection of trade secrets;
  • protection of free speech and press rights for noncommercial activities protected by California’s Constitution;
  • exemption of certain commercial credit reporting agency actions from the deletion and opt-out rights;
  • exemption of household data from the business’s right to know, deletion, and correction response obligations;
  • exemption of student grades, educational scores, or educational test results held for a local educational agency from the deletion right;
  • exemption of educational standardized assessments, including specific responses, from the right to know’s disclosure requirements when disclosure could jeopardize its validity or reliability; and
  • exemption of physical items containing Personal Information from the deletion and opt-out rights, such as the consumer’s photograph, if the consumer previously consented to the item’s creation and other circumstances apply.

In particular, we have collected Personal Information from our consumers within the last twelve (12) months which is categorized as follows:

Category	Examples	Collected
A. Indentifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.	YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	YES
G. Geolocation data.	Physical location or movements.	NO
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO
I. Professional or employment-related information.	Current or past job history or performance evaluations.	NO
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO
K. Inferences drawn from other personal information.	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO
L. Sensitive Personal Information.	Personal Information that reveals a consumer’s social security, driver(s) license, state identificationcard, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; or genetic data.	NO

We obtain the categories of Personal Information listed above from the following categories of sources:

• Directly from you. For example, when you register for an account or create a profile on our Site or mobile app, from forms you complete and submit to us or other communications with us such as those relating to troubleshooting and maintenance, or when you purchase Products and Services from us.
• Indirectly from you. For example, from observing your actions on our Site, and when you visit or log in to our Site.

We may use or disclose the Personal Information we collect for one or more of the following purposes:

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to ask a question about our Site or our Products/Services, we will use that Personal Information to respond to your inquiry. If you provide your Personal Information to purchase a Product or Service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new Product or Service orders or process returns.
• To provide, support, personalize, and develop our Site, Products, and Services.
• To create, maintain, customize, and secure your account with us.
• To process your requests, purchases, transactions, and payments and prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To personalize your Site experience and to deliver Content and Product and Service offerings relevant to your interests, including targeted offers and ads through our Site, third-party sites, and via email or text message (with your consent, where required by law).
• To help maintain the safety, security, and integrity of our Site, Products and Services, databases and other technology assets, and business.
• For testing, research, analysis, and Product development, including to develop and improve our Site, Products, and Services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your Personal Information or as otherwise set forth in the CCPA and CPRA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our equity or assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about our consumers is among the assets transferred.

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Automated Decision-Making and Profiling

We do not use automated decision-making, but we do use profiling. We do not consider that the use of profiling has any legal effect on you or significantly affects you.

You have the right to object to our use of profiling described in this Section. You can do that by opting out of cookies and similar technologies in accordance with the method described in the relevant Section below. If you do not want us to process your actual IP address (such as the IP address assigned to you by your Internet Service Provider) when you visit our Site, you can use a virtual private network (VPN).

Profiling

Profiling is any form of automated processing of your information to evaluate personal aspects about you, in particular to analyze or predict things like your performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Use of Profiling for Web Analytics

Our web analytics services, such as Google Analytics, collect information such as your location (based on your IP address), and your behavior (based on cookies) when you access our Site (such as the pages you visit and what you click on). We will only process information from cookies if you have consented to us setting cookies on your computer.

By automatically analyzing and categorizing information such as the location (based on IP address) as well as the behavior and devices of users to our Site (using cookies), we are able to gain a better understanding of what our Site users require (in terms of the Content of our Site and our Products and Services), how to improve our Site and how to advertise and market our Products and Services to them.

When you visit or log in to our Site, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other Personal Information they or others have about you, including by association with your email or home address. We (or our service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

Cookies will be used to track and store information about your behavior and device on our Site (unless you have opted out from receiving such cookies by rejecting cookies) and your location will be analyzed based on your IP address. We have a legitimate interest in processing this information for the purpose of improving our Site for our Site users and getting to know our Site user’s preferences so our Site can better meet their needs and desires.

We may share your Personal Information with a third party for a business purpose. When we disclose Personal Information for a business purpose, we enter into a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract.

Disclosures of Personal Information for a Business Purpose

In the preceding twelve (12) months, the Company has disclosed the following categories of Personal Information for a business purpose:

Category A: Identifiers.

Category B: California Customer Records Personal Information categories.

Category D: Commercial information.

Category F: Internet or other similar network activity.

We disclose your Personal Information for a business purpose to the following categories of third parties:

• Service providers.
• Data aggregators.
• Payment processors.

Sales of Personal Information

In the preceding twelve (12) months, the Company has not sold Personal Information to third parties.

This Section sets out how long we retain your Personal Information. We have set out specific retention periods where possible. Where that has not been possible, we have set out the criteria we use to determine the retention period.

Retention Periods

Correspondence and enquiries: when you make an enquiry, or correspond with us for any reason, whether by email, via mail or by phone, we will retain your Personal Information for as long as it takes to respond to and resolve your enquiry, and for one (1) year thereafter, at such time we will delete your Personal Information unless otherwise required by applicable law.

E-Newsletter: we retain the Personal Information you used to sign up for our e-newsletter for as long as you remain subscribed (i.e. you do not unsubscribe) or if we decide to cancel our e-newsletter Service, whichever comes earlier.

Criteria for determining retention periods: In any other circumstances, we will retain your Personal Information for no longer than necessary, taking into account the following:

• the purpose(s) and use of your Personal Information both now and in the future (such as whether it is necessary to continue to store that Personal Information in order to continue to perform our obligations under a contract with you or to contact you in the future);
• whether we have any legal obligation to continue to process your Personal Information (such as any record-keeping obligations imposed by relevant law or regulation);
• whether we have any legal basis to continue to process your information (such as your consent);
• how valuable your Personal Information is (both now and in the future);
• any relevant agreed industry practices on how long the Personal Information should be retained;
• the levels of risk, cost and liability involved with us continuing to hold the Personal Information;
• how difficult it may be to ensure that the Personal Information can be kept up to date and accurate; and
• any relevant surrounding circumstances (such as the nature and status of our relationship with you).

Email Marketing

If you have provided us with your email address, or are a subscriber of the Site, we may communicate with you by email to tell you about our Products and Services. To opt-out of our email list, send a request to [email protected] at any time and ask to be removed, or simply click the unsubscribe link found at the bottom of one of our emails. Please note that you may not be able to opt-out of certain transactional email communications, such as account notifications, emails regarding customer service questions, and/or other information related to your account or your use of the Site, Products and Services.

Your Rights and Choices

The CCPA and CPRA provide consumers (California residents) with specific rights regarding their Personal Information. This Section describes your CCPA and CPRA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request (see ), we will disclose to you:

• The categories of Personal Information we collected about you.
• The categories of sources for the Personal Information we collected about you.
• Our business or commercial purpose for collecting or selling that Personal Information.
• The categories of third parties with whom we share that Personal Information.
• The specific pieces of Personal Information we collected about you (also called a data portability request).
• If we sold, shared, or disclosed your Personal Information for a business purpose, three separate lists disclosing:
  • sales, identifying the Personal Information categories that each recipient purchased;
  • sharing, identifying the Personal Information categories that were shared with each recipient; and
  • disclosures for a business purpose, identifying the Personal Information categories that each recipient obtained.

Deletion Request Rights

You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see ), we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the Personal Information, provide a Product or Service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or Product recall, if any, conducted in accordance with federal law, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug Products or Services to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or de-identify Personal Information not subject to one of these exceptions from our records and will direct our service providers or contractors to take similar action.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:

• Emailing us at [email protected]; or
• Filling out our online submission form here: https://notthebee.com/contact.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information.

You may also make a request to know or delete or correct on behalf of your minor child by submitting a request by email at [email protected].

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password-protected account sufficiently verified when the request relates to Personal Information associated with that specific account.

We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

For instructions on exercising your sale opt-out or opt-in rights, see “.”

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact [email protected].

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to ninety (90) days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee reflecting the administrative costs involved if your request is manifestly unfounded or excessive. Alternatively, we could refuse to comply with your request and notify you of the reason in these circumstance.

Personal Information Sales and Sharing Opt-Out and Opt-In Rights

California law provides that if you are age 16 or older, you have the right to direct us to not sell or share your Personal Information at any time (the “right to opt-out”). As such, we do not sell or share the Personal Information of consumers we actually know are less than 16 years old.  Consumers who opt-in to Personal Information sales or sharing may opt-out of future sales or shares at any time.

To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting the following Internet Web page link:

Do Not Sell or Share My Personal Information

Limit the Use of My Sensitive Personal Information

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize Personal Information sales or sharing.

You do not need to create an account with us to exercise your opt-out rights. We will only use Personal Information provided in an opt-out request to review and comply with the request.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you Products or Services.
• Charge you different prices or rates for Products or Services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of Products or Services.
• Suggest that you may receive a different price or rate for Products or Services or a different level or quality of Products or Services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your Personal Information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Site and update the notice’s effective date. Your continued use of our Site following the posting of changes constitutes your acceptance of such changes.

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Site that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected].

California consumers will also have the right to:

• Correct inaccurate Personal Information.
• Opt-out of sharing Personal Information for cross-context behavioral advertising purposes.
• Restrict sensitive Personal Information use and disclosure.

For California residents under the age of 18 and registered users of our website and Services, California law provides that you can request the removal of content or information you posted on our website. Any such request should be sent to [email protected] along with a description of the posted content or other information to be removed. Please be advised that applicable law may not permit us to completely or comprehensively remove your deleted content or for other reasons as set forth under this California law.

Contact Information

If you have any questions or comments about this notice, the ways in which the Company collects and uses your information described here and in the Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

• Website: https://notthebee.com/contact
• Email: [email protected]
• Postal Address:
  Not the Bee, LLC
  Attn: Customer Service - Privacy
  110 Front Street, Suite 300
  Jupiter, FL 33458

If you need to access this Notice in an alternative format due to having a disability, please contact [email protected].