California Privacy Rights — CCPA & CPRA
1. Who This Policy Applies To
This page explains your privacy rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023.
This policy applies to you if you are a California resident who interacts with Olive et Oriel — whether browsing our website, creating an account, or placing an order.
Under CCPA/CPRA, a "California resident" includes any individual who is in California for other than a temporary or transitory purpose, or who is domiciled in California but is outside the state for a temporary or transitory purpose.
2. Business Identity
Bonheur Creatives Pty Limited
ABN: 63 618 780 573 | ACN: 618 780 573
Trading as: Olive et Oriel, SIRUNE, Canvas Art Print Co
Address: Unit 3, 18 Nells Road, NSW 2250, Australia
Privacy Contact: help@oliveetoriel.com
3. Categories of Personal Information We Collect
Under CCPA, we are required to describe the categories of personal information we collect using specific legal categories:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, email address, IP address, account ID, unique personal identifier | Yes |
| B. Customer Records | Billing/shipping address, phone number, payment card information (processed by payment providers) | Yes |
| C. Protected Classifications | Age, race, gender, religion, sexual orientation, etc. | No |
| D. Commercial Information | Purchase history, products viewed, items in cart, browsing history on our site | Yes |
| E. Biometric Information | Fingerprints, face recognition, etc. | No |
| F. Internet/Electronic Activity | Browsing history, cookies, device information, page views, search history on our site | Yes |
| G. Geolocation Data | Approximate location from IP address (city/region level only) | Yes |
| H. Sensory Data | Audio, visual, thermal, etc. | No |
| I. Professional/Employment | Job title, employer, etc. | No |
| J. Education Information | Educational records, degrees, etc. | No |
| K. Inferences | Preferences, characteristics, behaviours, interests drawn from the above | Yes |
| L. Sensitive Personal Information | SSN, driver licence, financial account, precise geolocation, health data, biometric, etc. | No (except payment card data processed by third-party payment processors — not stored by us) |
4. How We Collect Personal Information
We collect personal information from the following sources:
Directly From You
- When you place an order
- When you create an account
- When you sign up for our newsletter
- When you contact customer service
- When you leave a product review
- When you participate in promotions or surveys
Automatically
- Cookies and tracking technologies when you browse our website
- Analytics tools that collect browsing behaviour and device information
- Advertising pixels that track interactions with our ads
From Third Parties
- Payment processors (confirmation of successful transactions)
- Analytics providers (aggregated website usage data)
- Advertising partners (ad performance and conversion data)
5. Purposes of Collection
We collect and use personal information for the following business purposes:
- Order fulfilment: Processing, shipping, and delivering your purchases
- Customer service: Responding to inquiries, managing returns, providing support
- Marketing: Sending promotional emails (with your consent), personalising your experience
- Advertising: Showing you relevant ads on other platforms (subject to opt-out)
- Fraud prevention: Detecting and preventing fraudulent transactions
- Site improvement: Analysing usage to improve our website and services
- Legal compliance: Maintaining records required by tax and commerce laws
6. Do We Sell Personal Information?
Important Disclosure About "Selling" and "Sharing"
We do not sell personal information in the traditional sense — we do not exchange your data for money.
However, under CCPA/CPRA's broad legal definitions, sharing data with advertising platforms like Meta (Facebook/Instagram) and Google for targeted advertising purposes may constitute a "sale" or "sharing" of personal information.
This is because these platforms may use the data for their own purposes, such as improving their advertising services.
California residents have the right to opt out of this sharing.
7. Your California Rights
As a California resident, CCPA/CPRA grants you the following rights:
Right to Know
You can request information about what personal information we collect, use, disclose, and sell, including the categories and specific pieces of data.
Right to Delete
You can request that we delete personal information we have collected from you, subject to certain legal exceptions (e.g., tax record retention).
Right to Correct
Added by CPRA — you can request that we correct inaccurate personal information we hold about you.
Right to Opt-Out of Sale/Sharing
You can direct us to stop selling or sharing your personal information for advertising purposes. See the opt-out section below.
Right to Limit Sensitive Info Use
Added by CPRA — you can limit the use of sensitive personal information. Note: we do not collect most sensitive categories.
Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights — no denial of service, different pricing, or reduced quality.
8. Do Not Sell or Share My Personal Information
Opt Out of Data Sharing for Advertising
To opt out of the sharing of your personal information with advertising platforms (Meta, Google) for targeted advertising purposes:
Email us at: help@oliveetoriel.com
Subject line: "CCPA Opt-Out Request"
Include: Your full name and email address associated with any orders or account
What happens when you opt out:
- We will stop sharing your data with advertising platforms for targeted ads
- You may still see our ads, but they will be less personalised
- Your ability to shop with us remains unchanged
- Order processing and customer service are not affected
Processing time: 15 business days
9. Response Timeframes
When you submit a request to exercise your California rights:
- We will acknowledge receipt within 10 business days
- We will respond substantively within 45 days
- In complex cases, we may extend this by up to 45 additional days (90 days total) with notice
- If we cannot verify your identity, we will notify you and request additional information
10. Verification Process
To protect your privacy, we must verify your identity before processing access, deletion, or correction requests:
- Standard requests: We verify by matching information you provide (name, email) against our records
- Sensitive requests: We may use a two-step verification process requiring additional confirmation
- If we cannot verify your identity with reasonable certainty, we may deny the request and explain why
We will not collect additional personal information solely for verification purposes.
11. Authorised Agents
California residents may designate an authorised agent to submit privacy requests on their behalf.
To use an authorised agent:
- Provide written permission signed by the consumer
- The agent must submit proof of authorisation with the request
- We may still require identity verification from the consumer directly
12. Shine the Light (California Civil Code Section 1798.83)
Under California Civil Code Section 1798.83 ("Shine the Light" law), California residents may request information about categories of personal information we disclosed to third parties for their direct marketing purposes during the past calendar year.
To make a "Shine the Light" request, contact: help@oliveetoriel.com
13. Third Parties We Share Data With
We share personal information with the following categories of third parties:
14. Sensitive Personal Information
Under CPRA, "sensitive personal information" includes categories such as SSN, driver licence, financial account numbers, precise geolocation, health data, biometric data, and data revealing racial or ethnic origin, religious beliefs, or sexual orientation.
Our practices:
- Payment card data: Collected but processed by Shopify and third-party payment processors. We do not store full card numbers on our systems.
- We do NOT collect: Social Security numbers, driver licence numbers, biometric data, health data, precise geolocation, racial or ethnic origin, religious beliefs, sexual orientation, or genetic data.
Because we do not collect most sensitive personal information categories, the "Right to Limit Use of Sensitive Personal Information" has limited applicability to our services.
15. Updates and Contact
Last updated: 31 March 2026
We review and update this policy annually to ensure compliance with CCPA/CPRA requirements. Material changes will be communicated via email or website notice.
Contact Us
For questions about this policy or to exercise your California privacy rights:
Email: help@oliveetoriel.com
Subject lines for requests:
- "CCPA Access Request" — to request your data
- "CCPA Deletion Request" — to request deletion
- "CCPA Opt-Out Request" — to opt out of sale/sharing
- "CCPA Correction Request" — to correct inaccurate data
This policy is provided for informational purposes to comply with California law. For our complete privacy practices, see our main Privacy Policy.
