Do Not Sell or Share My Personal Information

California residents have the right to direct a business not to sell or share their personal information. This is often called the "Do Not Sell or Share My Personal Information" right.

Under the CCPA/CPRA:

• A "sale" means disclosing personal information to a third party in exchange for money or other valuable consideration.
• "Sharing" means disclosing personal information to a third party for cross-context behavioral advertising (targeted advertising based on your activity across different websites or services), whether or not money changes hands.

Exercising this right is free, and we will not discriminate against you for doing so.

Like many online stores, we may use third-party analytics and advertising technologies (such as cookies, pixels, and similar tools). Depending on how these technologies are configured, some of these activities may be considered a "sale" or "sharing" of personal information under the CCPA/CPRA — for example, when advertising or analytics partners receive identifiers to help deliver or measure targeted ads.

We do not knowingly sell or share the personal information of consumers we know to be under 16 years of age without affirmative authorization as required by law.

You can exercise your right to opt out of the sale or sharing of your personal information in any of the following ways:

• Opt-out link / control: Use the "Do Not Sell or Share My Personal Information" link or cookie-preference control available in the store.
• Email: hello@craftedbyjoanna.com
• Phone / Text: (385) 630-3116.
• Mail: Crafted By Joanna, 1413 Dean Ave., Junction City, KS 66441.

Please include enough information for us to locate and process your request (for example, the browser or device you use, and any account email associated with your activity). You may need to renew your opt-out choice if you clear your cookies, use a different browser or device, or if your browser settings change.

We recognize opt-out preference signals sent by your browser or device, such as the Global Privacy Control (GPC), where required by law. When we detect a valid GPC signal, we will treat it as a request to opt out of the sale or sharing of personal information for that browser or device.

Because these signals are tied to a specific browser or device, you may need to enable GPC on each browser and device you use. If you are logged in to an account, we will also apply the opt-out to that account where feasible.

You may use an authorized agent to submit an opt-out request on your behalf. If you use an authorized agent, we may require:

• proof that you gave the agent signed permission to submit the request, and
• verification of your own identity directly with us, where permitted by law.

We may deny a request from an agent who does not provide proof of authorization.

An opt-out of sale or sharing generally does not require us to verify your identity, so we will act on your request promptly.

We aim to process opt-out requests without unreasonable delay and within the timeframe required by applicable law [OPERATOR: insert applicable response window, e.g., 15 business days]. If we are unable to comply with a request, we will explain why.

We will not discriminate against you for exercising any of your privacy rights. This means we will not:

• deny you goods or services,
• charge you different prices or rates, or
• provide you a different level or quality of goods or services

simply because you exercised your right to opt out. We may, however, offer different prices or services where the difference is reasonably related to the value provided by your data, as permitted by law.

In addition to the right to opt out of sale or sharing, California residents may have the right to:

• Know what personal information we collect, use, disclose, and sell or share.
• Access and obtain a copy of their personal information.
• Delete personal information, subject to legal exceptions.
• Correct inaccurate personal information.
• Limit the use and disclosure of sensitive personal information.

For details on how to exercise these rights, please see our main Privacy Policy [OPERATOR: link to Privacy Policy].

Residents of certain other U.S. states may have comparable rights to opt out of targeted advertising, the sale of personal data, and certain profiling under their state privacy laws. Where these laws apply, we honor valid opt-out requests, including recognized universal opt-out signals such as GPC, to the extent required.

To exercise these rights, please use any of the contact methods listed in the "How to Opt Out" section above.

If you have questions about this page or wish to submit a request, contact us:

• Email: hello@craftedbyjoanna.com
• Phone / Text: (385) 630-3116
• Mail: Crafted By Joanna, 1413 Dean Ave., Junction City, KS 66441