California Privacy Notice (CCPA)
Introduction and Scope
This California Privacy Notice supplements the Creditlumio Privacy Policy and applies solely to visitors, users, and others who reside in the State of California ("California consumers" or "you"). We provide this notice to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (collectively, the "CCPA"). Terms defined in the CCPA have the same meaning when used in this notice.
Categories of Personal Information Collected
Over the preceding twelve (12) months Creditlumio has collected the categories of personal information described below. "Identifiers" — your IP address, browser fingerprint, and any email address you submit. "Customer records" — any name, email, or message you provide through forms. "Commercial information" — your newsletter subscription state. "Internet activity" — the pages you read and the referrer that brought you here. "Geolocation" — coarse city- or country-level derived from IP. "Inferences" — aggregated audience-segment estimates derived from reading behavior.
Sources of Personal Information
Sources of the personal information we hold about California consumers include: you, directly (when you subscribe, contact us, or submit a tip); your browser and device (request headers, IP address, cookie identifiers); and our limited list of operational service providers (hosting, CDN, email delivery, analytics). Creditlumio does not purchase personal information from data brokers or rent contact lists.
Business and Commercial Purposes
The personal information described in this notice is used by Creditlumio to operate, secure, and improve the service; to provide the editorial newsletter to subscribers; to answer messages submitted via our forms; to detect and prevent abuse; to produce aggregate audience reports; and to satisfy our legal obligations. We do not use personal information for any purpose materially different from those for which it was originally collected without notifying you.
Disclosure to Service Providers and Third Parties
Creditlumio discloses personal information only to a short list of service providers that act on our behalf and only for the business purposes outlined in this notice. These vendors are bound by contract to use the information solely for the contracted service and to delete it when their engagement ends or when it is no longer required to provide the service. We do not disclose personal information to any third party for that party's own marketing or commercial purposes.
Sale and Sharing of Personal Information
Creditlumio does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. In the preceding twelve (12) months we have not sold or shared the personal information of any California consumer, including any California consumer under the age of 16, and we have no actual knowledge of any such sale or sharing.
Sensitive Personal Information
Creditlumio does not collect sensitive personal information from California consumers other than as incidentally contained in voluntary submissions (for example, a message you choose to send through the Contact form). We do not use sensitive personal information to infer characteristics about you, and you accordingly have no right-to-limit request to make against us. We will, of course, honor any limitation you wish to apply going forward.
Your California Privacy Rights
Under the CCPA, California consumers have the following rights: (1) the right to know what personal information we have collected about you, including the categories of information, the sources, the purposes, and the categories of third parties to which we disclose it; (2) the right to access the specific pieces of personal information we hold; (3) the right to correct inaccurate personal information; (4) the right to request deletion of personal information; (5) the right to opt out of any sale or sharing of personal information (we do not sell or share, but the right exists); (6) the right to limit the use of sensitive personal information; and (7) the right to non-discrimination for exercising any of these rights.
How to Exercise Your Rights
Verifiable consumer requests under the CCPA can be submitted to Creditlumio through our Contact form or to the email address shown on the Contact page. To prevent fraudulent access requests, we will verify your identity using reasonable means tied to the data we hold — typically by confirming control of the email address tied to a subscription or by matching identifiers you provide against information already in our records. We respond to verified requests within the 45-day window required by the statute, with one 45-day extension where reasonably necessary.
California consumers may use an authorized agent to exercise their CCPA rights. To process a request submitted by an agent, Creditlumio requires the agent to provide signed written permission from the consumer or a power of attorney, plus reasonable verification of the consumer's identity. We may also contact the consumer to confirm that they have indeed authorized the agent to make the request.
Consumers Under 16 Years of Age
California consumers under the age of 16 are entitled to additional protection under the CCPA. Creditlumio does not sell or share the personal information of such consumers, and we do not knowingly collect personal information from children under 13. Parents or guardians who believe their child has submitted personal information through a form on the site can contact us via our Contact form and we will delete the information promptly.
Right to Non-Discrimination
Exercising your rights under the CCPA will not result in any adverse treatment by Creditlumio. We will not deny you the service, charge a different price, reduce the quality of the service, or otherwise penalize you for submitting a verifiable consumer request. The free editorial content we publish is available on the same terms to all visitors regardless of whether or how they exercise their CCPA rights.
Retention of Personal Information
Creditlumio follows a proportional retention policy. Newsletter records remain only while the subscription is active, with a minimal suppression entry kept post-unsubscribe to prevent accidental re-add. Contact-form records are retained for up to 24 months for follow-up and recordkeeping. Server logs are kept no longer than 90 days. Any aggregated analytics dataset that contains no identifiers is retained for long-term editorial planning.
Changes to This Notice and How to Reach Us
We may update this California Privacy Notice from time to time to reflect changes in our practices or in applicable law. The current version is always the one published on this page, with the "Last updated" date indicating when it became effective. For questions about this notice, or to exercise any of your CCPA rights, please contact Creditlumio through the Contact form linked in the site footer — that is the canonical privacy-correspondence channel for California consumers.