California Consumer Privacy Act (CCPA) Notice

Last Updated: December 28, 2025

This California Consumer Privacy Act (“CCPA”) Notice applies solely to California residents (“consumers”) and supplements the information contained in the Boston Made, Inc. (“Boston Made,” “we,” “us,” or “our”) Privacy Policy. We adopt this Notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (CPRA), and any terms defined in the CCPA/CPRA have the same meaning when used in this Notice.

1. Personal Information We Collect

We collect information that identifies, relates to, describes, references, or is reasonably capable of being associated with a particular consumer or household (“Personal Information”). Personal Information does not include:

• Publicly available information from government records
• Deidentified or aggregated information
• Information excluded from CCPA scope (e.g., HIPAA-protected data)

In the past 12 months, we may have collected the following categories of Personal Information:

• Identifiers — name, email address, postal address, account information, IP address
• Customer records information — billing details, service records
• Commercial information — purchase history, transaction data
• Internet or other electronic activity — browsing data, interactions with our website
• Geolocation data — general location derived from IP
• Audio/visual data — if you contact support by phone or video
• Professional or business-related information — when provided for account creation or service engagement
• Inferences — profile data created to improve service experience

We do not knowingly collect sensitive personal information unless explicitly provided and required for a business purpose, and only in compliance with law.

2. Sources of Personal Information

We collect Personal Information from:

• You, when you provide it to us
• Website and app activity
• Business partners and service providers
• Analytics and advertising services

3. How We Use Personal Information

We may use or disclose Personal Information for the following business purposes:

• Providing products, digital services, and customer support
• Processing transactions and billing
• Operating, securing, and improving our website and systems
• Communicating about services, updates, and account activity
• Detecting and protecting against fraud or security incidents
• Internal analytics and reporting
• Complying with legal and regulatory obligations

We do not use your Personal Information for automated decision-making that produces legal or similarly significant effects.

4. Sharing & Disclosure of Personal Information

We may disclose Personal Information to:

• Service providers and contractors
• Payment processors
• Cloud hosting and data storage vendors
• Professional advisors
• Legal authorities when required

We require third parties to use Personal Information only for permitted business purposes and to protect it appropriately.

Sale or Sharing of Personal Information

Boston Made does not sell Personal Information for money.

However, certain online analytics or advertising activities may be considered “sharing” under California law. Where applicable, you may exercise your right to opt-out of such sharing (see Section 7 below).

We do not knowingly sell or share Personal Information of minors under 16.

5. Retention of Personal Information

We retain Personal Information only as long as reasonably necessary to:

• Provide products and services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Retention periods vary based on the nature of the data and applicable law.

6. Your Rights Under the CCPA

As a California resident, you have the following rights — subject to certain exceptions and verification requirements:

Right to Know / Access

You may request that we disclose:

• The categories and specific pieces of Personal Information we have collected about you
• The categories of sources of that information
• The business or commercial purpose for collecting or sharing it
• The categories of third parties we disclose it to

Right to Delete

You may request deletion of Personal Information we collected from you.

Right to Correct

You may request correction of inaccurate Personal Information.

Right to Opt-Out of Sharing

You may opt-out of Personal Information being shared for cross-context behavioral advertising.

Right to Limit Use of Sensitive Personal Information

Where applicable, you may request limitations on the use of sensitive data.

Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

7. How to Submit a Privacy Request

You may exercise your CCPA rights by contacting us through:

📧 Email: [insert email]
📍 Mailing Address: [insert address]
📞 Phone (if applicable): [insert number]

We will verify your identity and respond within the timeframe required by California law.

You may also authorize an agent to submit a request on your behalf, subject to verification.

8. Children’s Data

Our services are not intended for children under 16, and we do not knowingly collect Personal Information from them.

9. Changes to This Notice

We may update this Notice from time to time. The “Last Updated” date reflects the most recent revision. Continued use of our website or services after changes signifies acceptance of the updated Notice.

10. Contact Us

If you have questions about this CCPA Notice or our privacy practices, please contact us:

Boston Made, Inc.
[email protected]