California Consumer Privacy Act – CCPA

Welcome to the California privacy section of Jefrev.com.

This page is a special supplement to my main Privacy Policy.

It exists to comply with the California Consumer Privacy Act (CCPA).

It also covers the newer California Privacy Rights Act (CPRA).

I know legal documents are very long and tedious to read.

However, California law requires me to be extremely detailed about your data.

I want to be fully transparent with you from the start.

I am not a massive tech company or a corporate data broker.

I am just one person running a personal plant blog.

I share my eight years of experience growing philodendrons.

I write about the mistakes I make and the things that actually work for me.

My house is currently packed with over 500 different philodendron plants.

Taking care of them, researching their needs, and writing this blog takes massive effort.

To keep this website online and free to read, I have to pay bills.

I pay for web hosting, domain names, and software tools.

To cover those costs, I run advertisements on my articles.

I use Google AdSense to display these ads to you.

I also sell premium, paid digital manuals and video guides.

Because I run ads and process digital sales, I handle personal data.

If you live in California, you have very specific legal rights regarding that data.

You can read the exact text of these privacy laws yourself.

Just visit the California Attorney General’s official website.

My goal here is to explain these laws in plain, simple English.

I want you to know exactly what data Jefrev.com collects while you read about plants.

Quick Summary Table: Data Collection Overview

Below is a quick overview of the data categories I collect, why I collect them, and whether they are shared with third parties.

Data Category	Examples Collected	Primary Purpose for Collection	Shared for Targeted Ads?
Identifiers	Email address, IP address, display name	Commenting, contact form replies, security blocking, product delivery	Yes (IP / Online ID via Ad Cookies)
Commercial Data	Purchase history, guide titles, order amounts	Fulfilling purchases, tax accounting, support	No
Network Activity	Page visits, scroll depth, click logs, device type	Site speed optimization, content planning, ad serving	Yes (Browsing activity via Ad Cookies)
Coarse Location	City, state, or country (derived from IP)	Traffic analytics, understanding reader climates	Yes (Coarse location via Ad Cookies)
Inferences	Interest in rare philodendrons or tropical plant care	Serving relevant, plant-related advertisements via Google AdSense	Yes

1. Understanding “Personal Information”

First, we need to define what the law actually means.

Under California law, “personal information” is a very broad term.

It is anything that identifies you, relates to you, or describes you.

It also includes things that could reasonably be linked to your household.

It is not just your name or your social security number.

It includes technical data like your IP address or your web browser history.

I do not collect your social security number or driver’s license.

I do not collect health data, religious beliefs, or biometric data.

I only collect the basic information needed to run a modern, secure website.

2. The Information I Have Collected in the Past 2 Months

Over the past 2 months, my website has collected specific categories of data.

Here is a detailed breakdown of exactly what I collect and why.

A. Identifiers

Identifiers are pieces of data that can specifically point to you as a person.

When you leave a comment on my blog posts, you provide identifiers.

You type in your name or a nickname.

You also type in your email address so the system knows you are real.

When you buy one of my paid digital plant care guides, you provide identifiers.

You give me your real name and your billing email address.

I need this to send you the download link for your purchase.

When you use my Contact Form to ask a question, you provide your email.

My website server also automatically logs your IP address when you visit.

An IP address is a string of numbers assigned to your internet connection.

This helps my security software block malicious hackers and spam bots.

B. Commercial Information

Commercial information is a record of the things you buy or consider buying.

I offer paid video guides and printable manuals on this site.

These are for people who want structured help without the trial and error.

If you purchase a guide, I keep a record of that transaction.

I log exactly which philodendron guide you bought and how much you paid.

I record the date and time the transaction was completed.

I do this because I have to pay taxes on my income.

The IRS requires me to keep accurate accounting records of all my digital sales.

I also need this record in case you lose your digital file.

If your computer crashes, I can look up your commercial record and resend the guide.

I never store your actual credit card numbers.

All payments are handled safely by secure third-party processors like Stripe or PayPal.

C. Internet and Electronic Network Activity

This is the technical data generated as you click around the internet.

When you browse Jefrev.com, my website uses tracking tools.

These tools log exactly how you interact with my articles.

They record which specific philodendron article you clicked on.

They measure how far down the page you scrolled before leaving.

They note how long you stayed on the website.

They also log what type of device you are using, like a phone or laptop.

They check if you are using Chrome, Safari, or another browser.

This internet activity data is usually collected automatically by cookies.

D. Geolocation Data

Geolocation data tells me roughly where in the world you are.

I do not track your exact, precise GPS location.

I do not know your street address unless you type it into a checkout form.

However, your IP address provides a general, coarse location.

It tells my website analytics what city, state, or country you are browsing from.

This helps me understand if my plant advice is reaching people in different climates.

E. Inferences Drawn from Data

Inferences are educated guesses made about you based on your behavior.

This is highly relevant because I use Google AdSense to monetize the site.

When you read ten different articles about the Philodendron Pink Princess, cookies notice that.

Advertising networks make an inference that you are interested in rare tropical plants.

They use that inference to show you relevant plant-related ads.

They build a temporary profile of your preferences to serve better advertisements.

3. Where I Get Your Personal Information

I am very transparent about where this data comes from.

I only gather information from two distinct sources.

Direct Collection from You

The first source is you directly.

You hand this information over to me intentionally.

You do this when you type your email into a newsletter subscription box.

You do this when you fill out the secure form on my Contact Page.

You do this when you type your payment details to buy a video guide.

If you comment on an article about root rot, you manually enter your display name.

Automated Collection from Your Device

The second source happens automatically in the background.

As you read my guides, your web browser talks to my web server.

They exchange basic technical data using small text files called cookies.

This happens on almost every single modern website you visit today.

My caching software, LiteSpeed, temporarily stores your data to make pages load faster.

My analytics software silently counts your visit to help me track my website traffic.

4. Why I Collect This Information

I do not collect your data just to hoard it on a server.

I only collect what I strictly need to operate this blog successfully.

Here are the specific business and commercial purposes for using your data.

To Deliver Paid Products

If you buy my eight-year philodendron care manual, I must deliver it.

I use your email address to send you the secure download link.

I use your transaction data to process refunds if necessary.

To Communicate With You

When you use my contact form, I need your email to write you back.

I use it to answer your specific questions about yellowing plant leaves.

I use it to send out my free email newsletters when I publish new research.

To Protect Website Security

The internet is full of automated bots trying to post fake spam comments.

I use your IP address and browser data to filter out this spam.

This keeps the comment sections clean and helpful for real plant growers.

To Improve My Writing

I look at internet activity data to see what articles are popular.

If thousands of people are reading about spider mites, I know what to write next.

It tells me what plant problems you need the most help solving.

To Display Advertisements

This is the most critical part regarding the CCPA and CPRA.

I use your internet activity and inferred interests to show you ads.

I partner with Google AdSense to display banners on my articles.

This ad revenue is exactly what allows me to keep the main blog completely free.

5. How I “Sell” or “Share” Your Information

I need to be absolutely clear about what I do and do not do.

I do not take your name, email, or phone number and sell it for cash.

I do not bundle my newsletter list and sell it to shady data brokers.

I would never do that to my readers.

However, the California privacy laws have very specific, broad definitions.

The CCPA defines “selling” and “sharing” in a unique way.

Because I use Google AdSense, third-party cookies track your browsing behavior.

Google and other ad networks do this to show you targeted ads.

They use cross-context behavioral advertising to match ads to your interests.

According to the California Privacy Protection Agency (CPPA), this practice is strictly regulated.

Allowing third-party ad networks to use cookies for targeted ads is legally considered “sharing.”

In some legal interpretations, it is even considered “selling” your personal information.

Therefore, to be fully compliant and transparent, I must state the following fact.

In the past 2 months, Jefrev.com has “shared” personal information.

Specifically, I have shared Internet network activity and online identifiers with advertising networks.

This was done solely for the purpose of serving personalized display advertisements.

I do not share any commercial transaction data with advertisers.

I do not share the names or emails of people who buy my digital guides.

6. Your Five Specific California Privacy Rights

If you are a resident of California, the law gives you massive control.

The CCPA and CPRA grant you five specific, enforceable rights regarding your data.

Right	What It Means For You	How to Exercise It
Right to Know	Request details on what personal data I have collected and why.	Email privacy@jefrev.com or use the Contact Form.
Right to Delete	Request permanent removal of your data from my active systems.	Email privacy@jefrev.com (subject to tax/security exceptions).
Right to Correct	Request correction of inaccurate personal details (e.g., misspelled email).	Email privacy@jefrev.com with updated info.
Right to Opt-Out	Direct me to stop “sharing” or “selling” data for targeted ads.	Reject cookies on the banner or use opt-out links below.
Right to Non-Discrimination	You will never be punished, blocked, or charged more for using your rights.	Guaranteed automatically across Jefrev.com.

A. The Right to Know

You have the right to ask me what information I have collected about you.

You can ask for the specific pieces of data I hold from the past 2 months.

You can ask what categories of sources I used to get that data.

You can ask exactly why I collected it in the first place.

You can also ask for the categories of third parties I have shared it with.

B. The Right to Delete

You have the right to ask me to permanently delete your personal data.

If you request this, I will wipe your information from my active servers.

However, you must understand there are strict legal exceptions to this rule.

I cannot delete transaction records if you bought a digital product from me.

State and federal tax laws require me to keep financial records for audits.

I also cannot delete data if I need it to detect security incidents or fraud.

C. The Right to Correct

Sometimes data gets entered incorrectly by mistake.

You might have accidentally misspelled your email address when buying a manual.

You have the right to ask me to correct any inaccurate personal information I hold.

If you point out a mistake, I will update my database to fix it.

D. The Right to Opt-Out of the “Sale” or “Sharing” of Data

You have the absolute right to tell me to stop sharing your data with advertisers.

You can opt out of cross-context behavioral advertising at any time.

You do not need to email me to do this. You can do it yourself right now.

You can use the cookie consent banner on my website to reject non-essential cookies.

If you reject them, Google AdSense will only show non-personalized ads.

These ads will be based on the page content, not your personal browser history.

You can also globally opt out of targeted advertising across the whole internet.

I highly recommend visiting the Digital Advertising Alliance’s WebChoices Tool.

You can also use the Network Advertising Initiative (NAI) Opt-Out page.

These free tools let you block tracking cookies from dozens of major ad networks instantly.

E. The Right to Non-Discrimination

Some companies punish users who try to protect their privacy.

The law strictly forbids this. You have the right to non-discrimination.

If you exercise your CCPA rights, I will never treat you differently.

I will not block you from reading my free philodendron articles.

I will not charge you a higher price for my digital video guides.

I will not provide you with a lower quality of customer service.

Everyone gets treated equally here, regardless of their cookie preferences.

7. Children’s Privacy and COPPA Compliance

Jefrev.com is an educational blog about cultivating indoor houseplants.

The content is written for adults and general audiences.

I do not intentionally target, market to, or collect data from children.

I strictly follow the Children’s Online Privacy Protection Act (COPPA).

I do not knowingly collect personal information from anyone under the age of 16.

Furthermore, I have a strict policy regarding the “sale” or “sharing” of minor data.

I do not sell or share the personal information of consumers under 16 years old.

I will only do so if I receive explicit, affirmative authorization to do so.

For kids between 13 and 16, they must opt-in themselves.

For kids under 13, I require verified, affirmative consent from a parent or guardian.

If a parent believes their child has submitted personal details to my site, act quickly.

Please contact me immediately so I can locate the data and permanently delete it.

8. Notice Concerning “Shine the Light” Law

California has an older privacy law known as the “Shine the Light” law.

It is found under California Civil Code Section 1798.83.

This law permits users who are California residents to make a specific request.

Once a year, you can request information regarding my disclosure of data to third parties.

Specifically, this covers data disclosed for their own direct marketing purposes.

As I stated earlier, I do not rent or sell your contact information to marketers.

I do not give your email to fertilizer companies so they can spam you.

However, if you wish to make a formal Shine the Light request, you may do so.

Please follow the contact instructions listed in the section below.

9. How to Exercise Your CCPA Rights

If you want to use any of your rights listed above, it is very simple.

You do not need to hire a lawyer or fill out complicated legal paperwork.

Just reach out to me directly, and I will handle it personally.

You can submit a verifiable consumer request by doing one of the following:

• Email: Send an email directly to privacy@jefrev.com.
• Contact Form: Use the secure form on my Contact Page.

When you contact me, please be clear about your intentions.

Include the phrase “CCPA Privacy Request” in the subject line of your message.

Tell me exactly which right you are trying to exercise, like the Right to Delete.

Verification and Response Timeline Summary

Request Stage	Standard Timeline	Details / Requirements
Initial Acknowledgment	Within 10 Business Days	Confirming receipt of your request and providing details on next steps.
Identity Verification	Completed upon receipt	Email confirmation or verifying purchase date (no ID/passports required).
Full Fulfillment	Within 45 Calendar Days	Completing the data deletion, disclosure, or correction request.
Maximum Extension	Additional 45 Calendar Days	Granted only for complex cases; written explanation provided if needed.

The Verification Process

I cannot just hand over data to anyone who asks for it.

I have to make sure you are the actual person the data belongs to.

To protect your privacy, I will need to verify your identity.

I do not ask for copies of your driver’s license or passport.

Usually, I will just ask you to reply to an email from the address on file.

If you bought a guide, I might ask you to confirm the date of your purchase.

I will only use the information you provide during verification to confirm your identity.

Response Timing

I am just one guy running this site from my living room.

I do not have a massive legal team working for me around the clock.

However, I take your privacy requests very seriously.

I promise to respond to your initial request within 10 business days.

I will complete the full request within the 45-day window required by California law.

If my plants have a major pest outbreak and I need more time, I will tell you.

The law allows me a one-time extension of another 45 days if necessary.

If I need that extension, I will email you a written explanation of why.

10. Using an Authorized Agent

California law allows you to use someone else to make a privacy request for you.

This person is called an Authorized Agent.

You can designate an agent registered with the California Secretary of State.

They can submit a Right to Know or Right to Delete request on your behalf.

If you choose to use an Authorized Agent, I have to verify them too.

I will require the agent to provide written permission signed by you.

I may also require you to verify your own identity directly with me first.

This is just an extra security step to ensure nobody is stealing your data.

11. Changes to This CCPA Notice

Privacy laws change frequently as technology evolves over time.

I reserve the right to amend this CCPA Privacy Notice at my discretion.

I will update this page whenever necessary to remain fully legally compliant.

When I make material changes to this policy, I will post the updated notice right here.

I will also update the “Last Updated” date at the very top of this page.

I encourage you to review this notice periodically to stay informed about your rights.

Your continued use of Jefrev.com means you accept these posted changes.

12. Contact Me With Questions

Reading legal documents is not nearly as fun as reading about philodendrons.

I know this page contains a lot of dense, heavy information to process.

If you have any questions or concerns about this notice, please reach out.

If you are confused about how I handle your data, just ask me.

You can email me at any time at privacy@jefrev.com.

You can also use the contact form linked earlier in this document.

I want you to feel completely safe while you learn about caring for your plants.

Thank you for trusting Jefrev.com and allowing me to share my plant journey with you.