CCPA Notice

Last updated: August 1, 2026

This CCPA Notice supplements our Privacy Policy and applies specifically to residents of the State of California ("consumers" or "you"), in accordance with the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").

1. Categories of Personal Information We Collect

In the past 12 months, Plum Alley has collected the following categories of personal information from California consumers:

  • Identifiers — Name, email, phone number, billing/shipping address, IP address. Collected.
  • Commercial Information — Order history, products purchased, purchase amounts. Collected.
  • Internet/Network Activity — Browsing behavior on our Site, pages viewed, referring URL (via Google Analytics). Collected.
  • Geolocation Data — Approximate location based on IP address. Collected.
  • Payment Information — Payment card details, processed via Shopify's secure payment gateway; not stored by us. Collected.
  • Sensitive Personal Information — Social Security number, precise geolocation, biometric data. Not collected.
  • Protected Classifications — Race, religion, health data, sexual orientation. Not collected.

2. How We Use This Information

We use the personal information described above to:

  • Process and fulfill your orders, including payments, shipping, and returns
  • Provide customer support through email, phone, and live chat
  • Operate and improve our Site using analytics
  • Detect and prevent fraud and unauthorized transactions
  • Comply with applicable laws and regulations

3. Sources of Personal Information

We collect personal information directly from you (e.g., when you place an order, create an account, or contact support), and automatically through your use of our Site via Google Analytics and Shopify's built-in tracking tools.

4. Do We Sell or Share Your Personal Information?

No. Plum Alley does not sell or share your personal information to third parties for monetary or other valuable consideration, and we have not done so in the preceding 12 months.

5. Disclosure of Personal Information to Service Providers

We disclose personal information to the following categories of service providers for business purposes only:

  • Shopify – e-commerce platform, order processing, and data hosting
  • Google Analytics – website traffic and usage analytics
  • Shipping carriers – order fulfillment and delivery
  • Payment processors – secure payment processing

These service providers are contractually restricted from using your information for any purpose other than providing services to us.

6. Your Rights Under the CCPA

As a California resident, you have the right to:

  • Right to Know — request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, and the purposes for collecting it.
  • Right to Delete — request that we delete personal information we have collected from you, subject to certain legal exceptions.
  • Right to Correct — request that we correct inaccurate personal information we maintain about you.
  • Right to Opt-Out of Sale/Sharing — since we do not sell or share personal information, no opt-out action is currently necessary. If this changes, we will update this Notice and provide an opt-out mechanism.
  • Right to Limit Use of Sensitive Personal Information — not applicable, as we do not collect sensitive personal information as defined by the CCPA.
  • Right to Non-Discrimination — we will not deny you goods or services, charge you different prices, or provide a lesser level of service because you exercised any of your CCPA rights.

7. How to Submit a Request

To exercise any of the rights above, you may contact us:

Please include your full name, email address associated with your order(s), and a description of your request. We will need to verify your identity before processing your request, which may require confirming details such as your order number or billing information.

8. Response Timeline

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing.

9. Authorized Agents

You may designate an authorized agent to submit a CCPA request on your behalf. We may require the agent to provide proof of authorization and may still require you to verify your own identity directly with us.

10. Changes to This Notice

We may update this CCPA Notice periodically to reflect changes in our practices or applicable law. Any updates will be posted on this page with a revised "Last updated" date.

11. Contact Us

For questions about this CCPA Notice or to exercise your privacy rights:

Email: info@plumalley.shop
Phone: +1 478-275-1972
Address: 2032 Veterans Blvd, Dublin, GA 31021, USA
Business Hours: Tue–Fri, 10 AM–6 PM (EST)