Your Right to Opt-Out of Sale of Your Personal Information
Under the California Consumer Privacy Act of 2018 (CCPA), beginning January 1, 2020, California residents have the Right to Opt-Out of the sale of personal information about them or their household, such as (though not limited to) their name, postal or email address, IP address, and/or other personally identifying information.
This opt-out right is subject to certain restrictions and exemptions. For example, it does not apply to information that I share with certain third-party service providers so that they can perform business functions for me and/or on my behalf, or to de-identified or aggregated data.
While I believe I do not technically meet any of the applicability thresholds specified by this California law, I am committed to providing visitors with as many privacy choices as I reasonably can.
The laws of certain other U.S. states, such as Nevada (see the “Nevada Consumer Opt-Out Rights” section of the Privacy Policy), may provide residents of those states with similar rights with respect to the sale of their personal information. However, other states’ laws may differ significantly from California law in the types of information to which such opt-out rights apply, in what is considered a “sale” of personal information subject to such rights, and in the restrictions and exemptions that may apply. Requests to exercise your rights under the privacy and/or data protection laws of a U.S. state OTHER than California, or of a country outside the U.S., should be submitted via any of the methods described in the “Controller/Responsible Party, Questions, and How to Reach Me” section of the Privacy Policy.
How to Opt-Out or Exercise Your Other California Privacy Rights
If you are a California resident and would like to opt-out of the sale of your personal information, and/or to exercise any of the other privacy rights provided by California law, such as the Right to Know (sometimes described as the right to access) and/or the Right to Delete your personal information, you or your authorized agent can submit a request via the California Privacy Request Form or any of the other methods specified below. Once I have reviewed your submission, I will contact you to discuss the next steps involved in processing your request, which may require me to verify your identity (see the “Identity Verification Requirements” section below).
(You generally don’t need to be physically present in California to exercise your California privacy rights provided that you are a current California resident. For more information about these rights, see the “Your California Privacy Rights” section of the Privacy Policy.)
Requests to exercise your rights under the privacy and/or data protection laws of a U.S. state OTHER than California, or of a country outside the U.S., should be submitted via any of the methods described in the “Controller/Responsible Party, Questions, and How to Reach Me” section of the Privacy Policy.
If you cannot or prefer not to use the above California Privacy Request Form, you or your authorized agent should email me at admin (at) aaronseverson (dot) com or contact me via postal mail at the following address:
Aaron Severson
Attn: Privacy Requests
11100 National Bl. #3
Los Angeles, CA 90064
Mail or email requests should indicate:
- Who you are, and:
- Whether your request is:
- For yourself, or,
- On behalf of someone else (in which case you’ll also need to provide proof that that person has authorized you to act on their behalf, or that you have the right to do so for some other reason, such as if you are a parent or legal guardian acting on behalf of your minor child), or,
- On behalf of your household (in which case all members of the household may need to make the request jointly), and:
- What right or rights you wish to exercise (e.g., the Right to Opt-Out, the Right to Know, and/or the Right to Delete), and:
- The best way(s) to contact you so that I can respond to your request and take any steps that may be required to verify your identity (see the “Identity Verification Requirements” section below).
(Except as otherwise required by law, requests pertaining to children under 18 should be submitted by a parent, legal guardian, or other authorized adult representative.)
Keep in mind that, as with the Right to Opt-Out, the other privacy rights provided by California law are subject to certain exemptions, exceptions, and restrictions provided by the applicable statutes and/or the associated regulations. Applicable law and/or regulations may also stipulate the maximum time allowed for acknowledging and/or responding to requests.
There is no charge for for making a request.
The CCPA and its associated regulations impose strict limits on the use and/or disclosure of information related to privacy requests. However, I may share information related to such requests to the extent permitted — and/or required — by applicable law/regulations for administrative and/or compliance purposes; to fulfill legal obligations (e.g., to respond to a subpoena or other court order); and/or to publish de-identified and/or aggregated information about requests I receive, as described in the “Reports and Aggregated Statistics” section of the Privacy Policy (e.g., statistics on how many requests of a particular type I received in a given period).
(To learn more about what kinds of information I gather in connection with this website, please consult the Privacy Policy.)
Identity Verification Requirements
Please note that, in order to better safeguard your privacy and the privacy of others, I may be required to verify your identity before processing certain requests pertaining to your personal information. I may be unable to fulfill your request if I cannot verify your identity to the degree of certainty applicable law and/or regulations require.
For Right to Know and Right to Delete requests, the current CCPA regulations issued by California’s Office of the Attorney General require me to verify your identity to either “a reasonable degree of certainty” (based on matching at least two data points I have determined to be reliable for identity verification purposes) or “a reasonably high degree of certainty” (based on matching at least three data points I have determined to be reliable for identity verification purposes, together with your signed declaration, under penalty of perjury, that you are the consumer whose personal information is the subject of the request), depending on the specific nature of the request, the nature and sensitivity of the personal information involved, and the likelihood of harm in the event of unauthorized access or deletion. If I ask you to provide me with additional personal information I did not already possess in order to verify your identity, the regulations prohibit me from using that additional personal information for any other purpose; after processing your request, I am only permitted to retain such additional personal information to the extent necessary to comply with the CCPA regulations’ record-keeping requirements. For a request that pertains to a household rather than an individual consumer, I may be required to verify the identities of all household members to whose personal information the request pertains.
Even if I verify your identity to “a reasonably high degree of certainty,” the regulations prohibit me from disclosing certain types of extremely sensitive personal information in response to a request to know. For example (but without limitation), if I possessed your Social Security Number, I could not provide you with the actual number I possessed, only the fact that I possessed that information.
California opt-out requests do not require these verification steps, although I may refuse an opt-out request if I have a reasonable, documented, good faith belief that it is fraudulent. (The current regulations require me to respond to opt-out requests I believe are fraudulent and explain why I believe them to be fraudulent.)