Privacy Policy (California)
Last updated August 17, 2025
This Privacy Policy describes how Pretty Little Poppy Marketplace, LLC (“PLPM,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information of California residents in accordance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”). This notice applies to our websites, events, online stores, and related services (the “Services”).
Notice at Collection (CCPA)
We collect the categories of personal information listed below for the business and commercial purposes stated, and we retain information only for as long as needed for those purposes or as required by law. We may disclose information to service providers and contractors. We do not sell personal information for money. We may share certain identifiers and internet activity with advertising partners for cross-context behavioral advertising unless you opt out using the choices below.
| Category | Examples | Purpose of Use | Disclosed to | Sold or Shared? | Retention |
|---|---|---|---|---|---|
| Identifiers | Name, email, phone, postal address, account ID, IP address | Account creation, orders & vendor registration, customer support, security & fraud prevention, communications | Hosting, analytics, email & SMS providers, payment processors | Not sold. May be shared for advertising unless you opt out | For the life of your account and as required by law |
| Customer Records | Billing/shipping address, order history; payment card data is processed by our payment processor and not stored by us | Fulfillment, accounting, support, legal compliance | Payment processors, shipping providers, bookkeeping tools | Not sold or shared | Up to 7 years for tax & accounting |
| Commercial Information | Products or services purchased, event bookings, preferences | Provide & improve Services, personalization, analytics | Analytics and operations service providers | Not sold. May be shared for advertising unless you opt out | As long as needed for the purpose collected |
| Internet / Network Activity | Device/browser data, pages viewed, referral URLs, cookies and similar technologies | Security, analytics, debugging, and to show ads | Analytics and advertising partners | Not sold. May be shared for advertising unless you opt out | Usually 13–24 months (cookie-dependent) |
| Geolocation (approximate) | General location inferred from IP address | Fraud prevention, localization | Security and analytics providers | Not sold or shared | As short as operationally useful |
| Inferences | Predicted preferences or interests | Personalization, marketing | Analytics and marketing tools | May be shared for advertising unless you opt out | As long as useful for personalization |
| Sensitive Personal Information | Account login & password. We do not collect government IDs or precise geolocation. | To provide your account and secure the Services | Hosting & security providers | Not sold or shared; not used to infer characteristics | For the life of your account |
1) Scope
This policy covers California residents’ interactions with PLPM in person at our events and online. It does not apply to job applicants, employees, or business-to-business contacts collected in an employment or contractor context.
2) Sources of Personal Information
- Directly from you when you create an account, make a purchase, apply to vend, or contact us.
- Automatically via cookies, pixels, and similar technologies.
- From service providers (e.g., payment, shipping, anti-fraud, and analytics providers).
3) How We Use Personal Information
- Provide, operate, and secure the Services;
- Process orders, payments, and vendor registrations;
- Communicate with you about your account, orders, events, and marketing (you can opt out of marketing at any time);
- Debug, analyze, and improve the Services;
- Detect, investigate, and prevent security incidents and fraud;
- Comply with legal obligations, enforce terms, and protect our rights.
4) Disclosing Personal Information
We disclose personal information to service providers and contractors who process it on our behalf for the purposes listed above, under contracts that restrict their use of the data (e.g., hosting, payment processing, analytics, communications, shipping, bookkeeping, security). We may also disclose information to authorities if required by law or to protect rights and safety.
5) “Sale” and “Sharing”
We do not sell personal information for money. We may share identifiers and internet activity with advertising partners to show you ads based on your activities across different websites or apps (cross-context behavioral advertising). You may opt out at any time using the link below.