This notice is for California residents and supplements our Privacy Policy. It follows the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”).
One thing up front: Digital Vibes Design is a small studio in Salinas. We do not currently meet the revenue or volume thresholds that make a company a “business” regulated by the CCPA. We’re publishing this notice and honoring these requests anyway, because we’re a California business serving California customers and you shouldn’t have to check our revenue to find out what we do with your data.
1. Categories of personal information we collect
In the last 12 months we have collected the following categories, as the CCPA defines them.
| Category | Examples we actually collect | Where it comes from | Why |
|---|---|---|---|
| Identifiers | Name, business name, email, phone, IP address, a random visitor ID in your browser | You, and automatically from your device | Answer inquiries, deliver services, security |
| Customer records | Billing name, billing email, transaction history | You, Shopify | Take payment, renew subscriptions, taxes |
| Commercial information | Services bought or considered, plan chosen, audits requested | You, our store | Deliver and support what you bought |
| Internet or network activity | Pages viewed, referrer, clicks, chat messages, session timestamps | Automatically, and from your conversations | Measure marketing, improve the site, follow up on leads |
| Geolocation data | Approximate city or region derived from IP, city you tell us you serve | Automatically, and from you | Serve the right language and local content |
| Audio information | Voice recordings and transcripts, only if you start voice mode in the assistant | You | Run the voice assistant and improve it |
| Professional information | Your industry, business hours, service area, competitors | You | Build and manage what you hired us for |
| Inferences | A read on what you’re interested in and how likely you are to become a customer | Derived from the above | Prioritize follow-up, tailor the conversation |
We do not knowingly collect biometric information, precise geolocation, government ID numbers, health information, financial account numbers, or information about anyone under 16. Card numbers are handled by Shopify and never reach our systems.
2. Sensitive personal information
We do not collect sensitive personal information as the CCPA defines it, and we do not use or disclose any for purposes that would trigger the right to limit its use. If you type something sensitive into the chat, we’d rather you didn’t; ask for a call instead.
3. Who we disclose it to
We disclose personal information to service providers that process it on our behalf under contract: hosting, database, store, payments, CRM, analytics, advertising and AI vendors. The full list, provider by provider, is in section 4 of the Privacy Policy. We also disclose information when the law requires it, or to protect our rights or someone’s safety.
4. Selling and sharing
We do not sell personal information for money, and we never have.
We do use Google and Meta advertising and analytics tags on this site. Under the CCPA’s broad definitions, that activity may count as “sharing” personal information for cross-context behavioral advertising and, on some readings, as a “sale” even without money changing hands. Rather than argue the point, we treat it as sharing and give you a way out.
We do not sell or share the personal information of anyone we know to be under 16.
5. How to opt out of sharing
Any one of these works:
- Email us at hey@digitalvibes.design with “Do Not Sell or Share” in the subject. We’ll suppress your information from advertising audiences and confirm in writing.
- Use a browser with Global Privacy Control, such as Firefox, Brave, or DuckDuckGo, or the Privacy Badger extension. Where our tag vendors act on the GPC signal, opting out is automatic.
- Turn it off at the source: the Google Analytics opt-out add-on and your Facebook ad settings.
- Block cookies in your browser. The store cart and the chat need cookies to work, so expect those to break.
We do not respond to Do Not Track browser signals, because there is no agreed standard for what a site should do with one.
6. How long we keep it
Retention is set out in section 6 of the Privacy Policy. In short: leads and conversations up to 3 years from your last interaction, client project records for the engagement plus 3 years, and orders and tax records for 7 years because tax law requires it.
7. Your rights
As a California resident you have the right to:
- Know what categories and specific pieces of personal information we’ve collected about you, where it came from, why we collected it, and who we disclosed it to.
- Delete the personal information we hold about you, subject to legal exceptions such as completing a transaction or keeping tax records.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of your personal information.
- Limit the use of sensitive personal information (we don’t collect any, so this one is moot here).
- Not be discriminated against for exercising any of these. We will not deny you service, charge you a different price, or give you a worse experience because you asked. We run no financial incentive programs tied to your data.
8. How to submit a request
Two ways, both reaching the same person:
- Email hey@digitalvibes.design with “Privacy request” in the subject
- Call or text (831) 214-4827
Tell us which right you’re exercising and give us enough to find you: the email address or phone number you used with us, and the approximate date of contact.
Verification. Before we act on a know, delete or correct request, we match the details you give us against what’s already in our records, usually the email address on file, plus one other detail. For a deletion request we’ll confirm by reply email before anything is erased, because deletion is permanent. We won’t ask you for a government ID or a Social Security number.
Authorized agents may submit a request on your behalf with written permission signed by you. We may still contact you directly to confirm.
Timing. We confirm receipt within 10 business days and respond substantively within 45 days. If we need the additional 45 days the law allows, we’ll tell you why before the first period ends. There’s no charge unless a request is manifestly unfounded or repetitive, and we’d tell you before doing anything about that.
9. Shine the Light
California Civil Code section 1798.83 lets residents ask about disclosures of personal information to third parties for their own direct marketing use. We do not disclose personal information to third parties for their direct marketing. You can send a Shine the Light request to the email address above anyway, and we’ll answer it.
10. Contact
Digital Vibes Design Salinas, California, United States Email: hey@digitalvibes.design Phone: (831) 214-4827