California Consumer Privacy Act – CCPA

ByJeff Rev

Last updated: November 2, 2026

This notice explains the privacy rights available to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

It describes the information covered by the law, the rights consumers may exercise, and how to submit a privacy request to Jefrev.com.

1. About the California Consumer Privacy Act

The California Consumer Privacy Act of 2018 gives California residents certain rights over their personal information. The California Privacy Rights Act, approved by voters in 2020, amended the CCPA and introduced additional protections.

The CPRA is an amendment to the CCPA, not a separate privacy law.

The law applies to qualifying businesses that meet its requirements. A website is not automatically subject to the CCPA simply because California residents can visit it.

Generally, the law covers for-profit businesses that do business in California, collect consumers’ personal information, determine the purposes and means of processing that information, and meet at least one of the following conditions:

  • Have annual gross revenue of at least $26.625 million for the preceding calendar year.
  • Buy, sell or share the personal information of 100,000 or more California residents or households in a year.
  • Receive at least 50% of annual revenue from selling or sharing California residents’ personal information.

Other legal provisions and exceptions may also affect whether an organisation is covered.

The applicable revenue threshold is subject to periodic adjustments. For the current threshold and further details, consult the California Privacy Protection Agency’s CCPA monetary thresholds.

This notice is provided to explain California privacy rights and Jefrev’s approach to privacy requests. Its publication should not be understood as a statement that Jefrev necessarily meets every statutory threshold or is engaged in every type of data processing described below.

2. What Is Personal Information?

Under the CCPA, personal information generally means information that identifies, relates to, describes or could reasonably be linked to a particular individual or household.

Depending on the circumstances, this may include:

  • Names and email addresses.
  • Internet Protocol (IP) addresses.
  • Browser and device information.
  • Internet browsing activity.
  • Records of purchases or transactions.
  • Location information.
  • Information associated with an online account.

Not every item of technical or browsing information is necessarily personal information in every situation. Its classification depends on whether it can reasonably be linked to a consumer or household under the law.

The CCPA also recognises a category called sensitive personal information. This includes certain government identification numbers, account credentials, precise geolocation, financial account details and other information specifically identified in the law.

Further details are available in the California Attorney General’s explanation of personal and sensitive personal information.

3. Your California Privacy Rights

Where the CCPA applies, California residents have several rights concerning their personal information.

A. Right to Know

You may request information about the personal information a covered business has collected about you and how it is used.

Depending on the request, this may include:

  • Categories of personal information collected.
  • Specific pieces of personal information collected.
  • Categories of sources from which the information was obtained.
  • Purposes for collecting or using the information.
  • Categories of third parties to whom information is disclosed.
  • Categories of personal information sold or shared with third parties.

Generally, the information must cover the 12-month period before the request. You may also request older information collected on or after January 1, 2022, subject to the conditions and exceptions provided by law.

A request to know may generally be made twice within a 12-month period without charge.

B. Right to Delete

You may request that a covered business delete personal information it has collected from you.

There are exceptions. A business may retain certain information when it is necessary for purposes permitted by law, such as completing a transaction, meeting a legal obligation, maintaining security, or exercising legal rights.

A deletion request therefore does not always mean that every record must be erased immediately or under all circumstances.

C. Right to Correct

You may request that a covered business correct inaccurate personal information it maintains about you.

For example, this may apply when information associated with your identity or account is incorrect.

The business may need to verify the request and determine whether the information should be corrected.

D. Right to Opt Out of Sale or Sharing

You may direct a covered business to stop selling your personal information or sharing it for cross-context behavioural advertising.

Under the CCPA, the meaning of selling and sharing is broader than simply exchanging personal information for cash.

In particular, sharing can include disclosing personal information to another party for advertising that targets consumers based on activity across different websites or services.

The use of third-party advertising technology does not, by itself, establish that every disclosure is a sale or sharing under the CCPA. The actual data involved, purpose, service arrangements and applicable legal requirements matter.

As explained in our Privacy Policy, Jefrev does not knowingly sell personal information for monetary consideration. This statement does not automatically determine whether a particular third-party disclosure could qualify as sharing under California law.

Where the CCPA applies and a covered business engages in activities requiring an opt-out, consumers must be provided with an effective way to exercise this right.

E. Right to Limit the Use of Sensitive Personal Information

You may have the right to direct a covered business to limit the use and disclosure of your sensitive personal information to purposes permitted by the CCPA.

This right applies to certain uses beyond those allowed without additional limitation under the law.

It does not mean that every business must stop all use of sensitive personal information. The permitted purposes and exceptions are explained in the CCPA and its implementing regulations.

F. Right to Non-Discrimination

A covered business must not unlawfully discriminate against you for exercising your California privacy rights.

For example, it generally cannot deny you access to a service, charge a different price, or provide a different level of service simply because you submitted a valid privacy request.

The law includes certain exceptions, including permitted financial incentive arrangements.

For the complete explanation of these rights, visit the California Attorney General’s CCPA consumer guidance.

4. Advertising, Cookies and Personal Information Sharing

Advertising and analytics services may use cookies or similar technologies to collect information about website visits and interactions.

Depending on the service and its configuration, this information may include browser identifiers, IP addresses, device information and browsing activity.

Under California law, certain disclosures of personal information for cross-context behavioural advertising may qualify as sharing, even when no money is exchanged.

However, not every advertisement, cookie or analytics tool automatically amounts to a sale or sharing of personal information.

The classification depends on the actual data processing and applicable legal definitions.

Jefrev does not assume that all third-party advertising or analytics activities have the same privacy implications. Where such services are used, their practices should be assessed according to their actual configuration and the information they process.

For more information about cookies and related technologies, please read our Cookie Policy.

5. How to Submit a California Privacy Request

If you are a California resident and wish to exercise a privacy right, you may contact Jefrev using either of the following methods:

Privacy email: privacy@jefrev.com

Online contact: Jefrev Contact Us page

When submitting a request, please:

  1. State that you are making a California privacy request.
  2. Identify the right you wish to exercise, such as access, deletion, correction or opt-out.
  3. Provide enough information for us to understand and locate the relevant records.
  4. Include a reliable way to receive a response.

For email requests, using the subject line California Privacy Request can help identify the purpose of your message.

Please do not send passwords, complete financial account details or other unnecessary sensitive information through an ordinary email or contact form.

Requests will be reviewed and handled according to the laws that apply to the request and the information involved.

6. Verification and Authorized Agents

A business may need to verify your identity before completing certain privacy requests.

This helps prevent someone else from obtaining or deleting your personal information without permission.

The amount of information required for verification should be appropriate to the nature and sensitivity of the request.

California residents may also authorise another person to submit certain privacy requests on their behalf.

Where appropriate, the business may request proof of the agent’s authority, such as signed permission, and may take reasonable steps to verify the consumer’s identity.

An authorised agent cannot automatically bypass the verification requirements that apply to a particular request.

7. Global Privacy Control and Browser Opt-Out Signals

Some browsers and browser extensions support Global Privacy Control (GPC), a privacy preference signal that communicates a user’s request to opt out of the sale or sharing of personal information.

Under the CCPA regulations, businesses subject to the relevant requirements must recognise qualifying opt-out preference signals as valid requests to opt out of sale or sharing.

More information is available at:

Global Privacy Control

California Attorney General: Global Privacy Control

The recognition and handling of these signals depend on the website’s actual technical configuration and the legal requirements that apply to its activities.

8. How Long Privacy Requests May Take

Under the CCPA, covered businesses generally have 45 calendar days to respond to requests to know, delete or correct personal information.

Where additional time is reasonably necessary, the response period may be extended by another 45 calendar days, provided the consumer receives the required notice and explanation.

Opt-out requests are generally handled as soon as feasibly possible and no later than 15 business days where the applicable requirements apply.

Verification may be necessary, and some requests may be denied when a legal exception applies.

If a request cannot be fulfilled, the business should explain the reason where required by law.

9. Complaints and Further Information

If you have concerns about how your personal information is handled or believe your California privacy rights have been violated, you may also contact the California Privacy Protection Agency.

Official resources include:

These resources provide additional information about consumer rights and the enforcement of California privacy laws.

10. Updates to This Notice

This notice may be revised when our website practices or applicable privacy requirements change.

When material changes are made, the updated version will be published on this page and the revision date will be changed accordingly.

Readers are encouraged to review this notice periodically.

11. Contact Jefrev

For questions about this notice or to submit a privacy-related inquiry, please contact:

Website: Jefrev.com

Privacy email: privacy@jefrev.com

Contact page: https://jefrev.com/contact-us/

For information about our general data practices, please also review the Privacy Policy and Cookie Policy.