California Privacy Rights
Last updated:
Rubytee is based in Valley Springs, California. This page is our notice to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), and related California laws. It explains which categories of personal information we collect, why, who receives it, how long we keep it, and exactly how you can exercise your California privacy rights. It supplements our general Privacy Policy, which applies to all customers wherever they live.
California privacy at a glance
- We do not sell your personal information, and we have not sold it in the past 12 months.
- We do not share your personal information for cross-context behavioral advertising.
- Sensitive information: we do not use or disclose it for purposes that give you a right to limit.
- Your rights: to know, access, correct and delete your information, and not to be discriminated against for using them.
- How to ask: email support@rubytee.com with the subject “California privacy request”.
- Response: we confirm receipt within 10 business days and respond within 45 calendar days.
1. Who this notice applies to
This notice applies to individuals who are residents of California and who visit rubytee.com, buy from us, create an account or contact our support team. It covers personal information collected online and through email support. It does not cover information that is publicly available, de-identified or aggregated so that it can no longer reasonably be linked to you.
Rubytee, 6085 Hogan Dam Road, Valley Springs, CA 95252, United States, is the business responsible for your personal information. Depending on our size and activities, some CCPA obligations may not apply to us by law; we have chosen to honor the rights described here for every California resident who asks.
2. Notice at collection: categories we collect
The table below lists the CCPA categories of personal information we have collected in the past 12 months, where it comes from and why we use it.
| CCPA category | Examples at Rubytee | Source | Business purpose |
|---|---|---|---|
| Identifiers | Name, email address, postal address, phone number (if given), IP address, account login | You; your device | Taking and delivering orders, support, account access, security |
| Customer records (Cal. Civ. Code § 1798.80) | Billing and shipping details, limited payment information such as card type and last four digits | You; payment provider | Processing payments, refunds and records |
| Commercial information | Shirts purchased, sizes and colors, order history, returns and exchanges | You; our order system | Fulfilling orders, handling returns, accounting |
| Internet or network activity | Pages viewed, referring page, browser and device type, date and time of visits | Your device, through essential cookies and server logs | Running and securing the site, fixing errors |
| Audio, electronic or visual information | Photos you send of a damaged or incorrect shirt; the content of your emails | You | Resolving claims and support requests |
| Inferences | None. We do not build profiles to predict your preferences or characteristics. | — | — |
| Sensitive personal information | Account login credentials (email and password), used only to let you sign in | You | Providing your account; never sold, shared or used to infer characteristics |
We do not collect biometric information, precise geolocation, government identification numbers, health information, or information about your race, religion or sexual orientation.
3. How long we keep each category
We keep personal information only as long as it is reasonably necessary for the purpose it was collected for, or as required by law:
- Order, payment and customer records: for as long as tax and accounting rules require, which is typically several years after the order.
- Account details: until you close your account or ask us to delete it, subject to the order records above.
- Support emails and claim photos: for as long as useful to resolve your request and any follow-up, then deleted or anonymized.
- Server and security logs: for a short period, after which they are automatically removed.
4. Who receives your information
In the past 12 months we have disclosed personal information for business purposes only to service providers and contractors who are bound by contract to use it solely to provide services to Rubytee:
- the payment provider that processes checkout payments (identifiers, customer records, commercial information);
- shipping carriers that deliver parcels (identifiers such as name, address and, where needed for delivery, phone number and email);
- website hosting, security and email service providers (identifiers, internet activity and the content of messages, as needed to run the site and our inbox).
We may also disclose information when the law requires it, to protect the rights and safety of our customers or Rubytee, or as part of a merger or sale of the business, in which case the recipient must honor this notice.
5. No sale, no sharing
Rubytee does not sell personal information for money or other valuable consideration, and does not share personal information with third parties for cross-context behavioral advertising. We have not done either in the past 12 months. Because we do not sell or share, we do not offer a “Do Not Sell or Share My Personal Information” link; if that ever changes, we will update this notice and add the link before any sale or sharing begins. We do not have actual knowledge of selling or sharing the personal information of consumers under 16.
Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of sale and sharing for that browser. Since we do neither, the signal does not change how our site works, but we respect it as your stated preference.
6. Your California privacy rights
Right to know and access
You can ask us to tell you the categories of personal information we have collected about you, the categories of sources, the business purposes, the categories of third parties we disclosed it to, and the specific pieces of personal information we hold about you. You can make this request up to twice in a 12-month period.
Right to delete
You can ask us to delete personal information we collected from you. We will delete it, and tell our service providers to delete it, unless an exception applies, for example where we must keep order records for tax law, to complete a transaction you requested, to handle a return or refund still in progress, or to detect security incidents. If we keep anything, we will tell you what and why.
Right to correct
You can ask us to correct inaccurate personal information, such as a misspelled name or an old address in your account. Many details can also be updated directly in My Account.
Right to limit use of sensitive personal information
We only use sensitive personal information (your account login) to provide the account you asked for, which is a permitted purpose, so there is nothing further to limit. If that ever changes, we will offer a way to limit it.
Right to non-discrimination
We will never deny you goods, charge you a different price, give you a different level of service or suggest you will receive worse treatment because you exercised a privacy right. Our 60-day returns, free shipping and support are the same for everyone.
7. How to submit a request
- Email support@rubytee.com with the subject line “California privacy request”, or write to Rubytee, 6085 Hogan Dam Road, Valley Springs, CA 95252, United States.
- Say which right you want to use (know, access, delete or correct) and, for corrections, what should change.
- Send the request from the email address linked to your order or account if possible, and include a recent order number. This helps us verify you quickly.
Please do not send copies of identity documents, card numbers or passwords. We will never ask for them to process a privacy request.
8. How we verify your request
To protect your information from someone pretending to be you, we match the details in your request against what we already hold. For requests to know categories, matching your email address and one order detail is usually enough. For requests for specific pieces of information or for deletion, we may ask you to confirm two or more details, such as a recent order number and the delivery address used. If we cannot verify you, we will explain why and what else could help. We only use the information you give for verification to process your request.
9. Authorized agents
You may use an authorized agent to make a request for you. The agent must provide signed written permission from you, and we may still ask you to verify your identity directly or confirm that you gave the agent permission. A person holding a valid power of attorney under California law can make requests without these extra steps.
10. Response times
| Step | Timing |
|---|---|
| Confirmation that we received your request | Within 10 business days (usually within 1 business day) |
| Substantive response | Within 45 calendar days of receipt |
| Extension, if reasonably necessary | Up to a further 45 calendar days, with notice and the reason |
| Cost to you | Free, unless requests are manifestly unfounded or excessive |
Information we provide in response to an access request covers the 12 months before your request, unless you ask for a longer period and providing it is possible without disproportionate effort.
11. Shine the Light
California Civil Code § 1798.83 lets California residents ask whether a business has disclosed personal information to third parties for their own direct marketing purposes in the previous calendar year. Rubytee has not made any such disclosures. You can still send a request to the email address above with the subject “Shine the Light”, and we will confirm this in writing.
12. Do Not Track
Some browsers send a “Do Not Track” signal. There is no common industry standard for responding to it. Our site does not track you across other websites, and we do not use third-party advertising cookies, so the experience is the same whether or not your browser sends the signal.
13. Minors
Our store is intended for adults, and orders must be placed by someone aged 18 or older or with a parent’s or guardian’s permission. California residents under 18 who have posted content on our site, such as a product review, can ask us to remove it by emailing us; we will remove the visible content, although we may need to keep order records.
14. Changes to this notice
We review this notice at least once a year and update it when our practices or the law change. The date at the top shows the latest version.
15. Contact
For questions about this notice or your California privacy rights, email support@rubytee.com. We reply within 1 business day. Related pages: Privacy Policy, Terms of Service and Contact Us.