Under California law, you have the right to know exactly who controls your personal information. Below is our complete and accurate business identity as it applies to this Disclosure.

The California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq., as amended by the CPRA) requires us to tell you the categories of personal information we collect, whether directly from you or automatically. We have collected the following categories in the past 12 months.

We do not knowingly collect personal information from children under 16 years of age. See Section 14 for our full minors policy.

We collect personal information through the following channels. We do not purchase personal data from data brokers or obtain personal information from outside sources not listed here.

We use personal information only for the business purposes described below. We do not use your personal information for any purpose that is incompatible with the context in which it was collected without your prior consent.

We share your personal information only in the limited circumstances described below. We do not share personal information with unrelated third parties for their own independent marketing or commercial purposes without your opt-in consent.

California law draws a distinction between "selling" personal information (transferring it for monetary consideration) and "sharing" it (disclosing it for cross-context behavioral advertising purposes). Both are subject to your right to opt out under the CCPA/CPRA.

The CPRA (effective January 1, 2023) created a new category called "Sensitive Personal Information" (SPI) and grants California residents the right to limit our use of it. Here is our transparent disclosure of whether we collect any SPI.

We retain personal information for no longer than is reasonably necessary for the purposes described in this Disclosure or as required by applicable law. The specific retention periods below apply to the categories of information we collect.

California residents have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023. These rights are not theoretical — they are legally enforceable, and we honor each of them.

• Right to Know (Cal. Civ. Code § 1798.110) You have the right to know: (1) the categories of personal information we have collected about you; (2) the categories of sources from which we collected it; (3) the business or commercial purpose for collecting or sharing it; (4) the categories of third parties with whom we share it; and (5) the specific pieces of personal information we have collected about you. You may request this information covering the prior 12 months. We respond within 45 calendar days.
• Right to Delete (Cal. Civ. Code § 1798.105) You have the right to request that we delete personal information we have collected about you. Upon receiving and verifying your request, we will delete your information from our records and direct our service providers to do the same — except where we are legally required to retain it (e.g., tax records, fraud investigation records, or information needed to complete a pending transaction). We will tell you which categories, if any, we are retaining and why.
• Right to Correct (Cal. Civ. Code § 1798.106) — CPRA Addition If you believe that personal information we hold about you is inaccurate, you have the right to request that we correct it. We will use commercially reasonable efforts to correct inaccurate information, taking into account the nature of the information and the purposes of our processing. We will respond to correction requests within 45 calendar days.
• Right to Opt Out of Sale or Sharing (Cal. Civ. Code § 1798.120) You have the right to direct us not to sell or share your personal information with third parties for cross-context behavioral advertising purposes. We do not sell personal information for money. We may share data with advertising platforms — and you can opt out of that sharing at any time using the link on our Do Not Sell or Share page or via our Privacy Opt-Out Request Form.
• Right to Limit Use of Sensitive Personal Information (CPRA) You have the right to direct us to limit the use of your sensitive personal information to only what is necessary to provide the services you requested. As described in Section 07, the only SPI we collect is account login credentials, and its use is already limited to authentication purposes. To formally exercise this right, email support@thephonesupplyco.com.
• Right to Data Portability (Cal. Civ. Code § 1798.110) As part of your Right to Know, you may request a copy of the specific pieces of personal information we have collected about you. Where technically feasible, we will provide this in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity.
• Right to Non-Discrimination (Cal. Civ. Code § 1798.125) We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not deny you goods or services, charge you a different price, provide you a different level or quality of service, or suggest that you will receive a different price or quality of service because you exercised your privacy rights. See Section 13 for our full non-discrimination commitment.
• Right to Use an Authorized Agent (Cal. Civ. Code § 1798.135) You may designate an authorized agent to submit a rights request on your behalf. We require written authorization signed by you (or proof of Power of Attorney) and will verify your identity directly before honoring the request. See Section 12 for full authorized agent instructions.

You may submit a privacy rights request using any of the following methods. We process all California privacy requests within 45 calendar days of receipt, with one possible 45-day extension if we notify you in advance.

Verifying your identity before we process a privacy rights request is not a barrier — it is a protection. It ensures we do not accidentally disclose or delete your personal information in response to a fraudulent request. Here is exactly how our verification process works.

California residents may designate an authorized agent to submit privacy rights requests on their behalf. To protect you from fraudulent agent claims, we require the following documentation before honoring a request submitted by an agent.

California Civil Code § 1798.125 prohibits businesses from discriminating against consumers who exercise their CCPA/CPRA rights. We take this obligation seriously. Here is our explicit commitment.

We take the privacy of minors very seriously. The following policies apply specifically to individuals under 16 years of age.

As a store that ships to all 50 U.S. states, we are committed to honoring privacy rights wherever our customers live. While this page focuses on California, the following states also have comprehensive consumer privacy laws that we comply with.

For all California privacy rights requests, general privacy inquiries, or concerns about how we handle your personal information, use any of the following contact methods. We respond to all privacy inquiries within 10 business days and complete all rights requests within 45 calendar days.

We review and update this California Privacy Disclosure at least annually and whenever material changes occur in how we collect, use, or share personal information. Here is exactly how we handle updates.