California and Other U.S. State Privacy Laws Policy

This policy supplements Warmies’ ("we," "us," or "our") general Privacy Policy, which can be accessed at https://warmies.com/policies/privacy-policy. Unless otherwise stated, terms defined in the Privacy Policy have the same meaning in this California and Other U.S. State Privacy Laws Policy.

Part I – U.S. State Privacy Laws Generally

If you live in California, Delaware, Maryland, Minnesota, Texas, Vermont, or another state that has enacted a  consumer data privacy law, you may have certain rights to request information from us about our Processing of your Personal Information, or to direct us to take certain actions with respect to your Personal Information. Depending on your state of residence and the information at issue, those rights may include:

• the right to confirm whether we Process your Personal Information and to access the categories of Personal Information we Process about you;
• the right to correct inaccuracies in your Personal Information;
• the right to delete your Personal Information (subject to any legal obligation we may have to retain it);
• the right to obtain a portable copy of the Personal Information we Process about you;
• the right to opt out of our sale or sharing of your Personal Information, or our use of your Personal Information for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• the right to obtain a list of the specific third parties to whom we have disclosed your Personal Information; and
• the right to appeal a decision we make that you do not agree with.

If you believe a state data privacy law applies to you and you (or your authorized agent) would like to exercise a right it confers, please contact us at [email protected].

Part II – CCPA-Specific Provisions

In addition to the information provided in our general Privacy Policy and Part I above, the following disclosures apply to California residents whose Personal Information is covered by the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (collectively, "CCPA"). Any terms defined in the CCPA have the same meaning when used in this Part II.

A. Our Data Practices

Categories of Personal Information Collected in the Past Twelve Months

We identify the categories of Personal Information we have collected in the past 12 months in the “What Information Do We Collect from You” section of our Privacy Policy. We Process Personal Information described in in Cal. Civ. Code § 1798.80, including name, address, telephone number, and credit card information. Unless described elsewhere in our Privacy Policy or Terms of Service, in general, we do not Process characteristics of protected classifications, biometric information, professional or employment-related information, educational information, or sensitive personal information.   

Categories of Sources

We identify the categories of sources from which we collect Personal Information in the “What Information Do We Collect from You” and the “What Information Do We Collect from Other Sources?” sections of our Privacy Policy.

Business and Commercial Purposes for Collecting Personal Information

We identify the purposes for which we collect Personal Information in the “How Do We Use Information Collected about You?” section of our Privacy Policy. Most of those purposes constitute “business purposes” under the CCPA. Our marketing and advertising activities constitute “commercial purposes” under the CCPA.

Sale and Sharing of Personal Information

As we explain in the “To Whom Do We Disclose or Share Your Personal Information?” section of our Privacy Policy, our marketing efforts may constitute a “sale” or “share” of  Personal Information, as those terms are defined in the CCPA. In the preceding 12 months, we have likely “sold” or shared the following categories of Personal Information described in our Privacy Policy: Personal Identifiers, Commercial Information, and Automatic Network Activity.

The categories of third parties to whom we likely “sell” or share personal information include digital advertising networks and social media platforms. These partners help us market our Products to you when you are using other websites or social media platforms.

We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.

California residents have the right to opt out of the sale or sharing of their Personal Information at any time. See Section C below for instructions on how to exercise that right.

Personal Information Processed  for Business Purposes

As described in the “To Whom Do We Disclose or Share Your Personal Information?” section of our Privacy Policy, in the preceding 12 months, we have disclosed Personal Information to service providers for a variety of business purposes, including payment processing, order fulfillment, and data analytics.

Sensitive Personal Information

As explained in the “What Information Do We Collect from You?” section of our Privacy Policy, in general, we do not Process Personal Information when we provide our Products.

B. Your CCPA Rights

Right to Know

You have the right to request that we disclose the Personal Information we have collected about you, covering the period from January 1, 2022, through the date we receive your verifiable consumer request (or such shorter period as you specify). Upon receiving and confirming a verifiable consumer “request to know,” we will disclose to you:

• the categories of Personal Information we have collected about you;
• the categories of sources from which that Personal Information was collected;
• our business or commercial purpose for collecting, selling, or sharing that Personal Information;
• the categories of third parties to whom we have disclosed, sold, or shared that Personal Information; and
• the specific pieces of Personal Information we have collected about you.

Right to Delete

You have the right to request that we delete the Personal Information we have collected from you. Upon receiving and confirming a verifiable “request to delete,” we will delete (and direct our service providers and contractors to delete) your Personal Information from our records, unless an exception applies. We may deny your request to delete if we or our service providers are required or permitted to retain the personal information, including to:

• complete the transaction for which the Personal Information was collected or provide a Product you requested;
• ensure security and integrity;
• comply with a legal obligation; or
• otherwise use the Personal Information internally in a lawful manner consistent with the context in which you provided it.

Right  to Correct

You have the right to request that we correct inaccurate Personal Information we maintain about you. Upon receiving and confirming a verifiable “request to correct,” we will use commercially reasonable efforts to correct the inaccuracy in our records and will direct our service providers and contractors to do the same.

Right to Opt Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your Personal Information at any time. To exercise this right, see “Opting Out of Selling or Sharing” in Section C below.

No Right to Limit Processing of Sensitive Personal Information or ADMT

Because we do not generally Process Sensitive Personal Information and do not Process Sensitive Personal Information for any purpose not permitted under Cal. Code Regs. § 7027(m), you do not have the right to limit our use or disclosure of Sensitive Personal Information.

Because we do not use automated decision-making technology (ADMT), as that term is defined in the CCPA, you do not have the right to opt out of or access ADMT.  

Right Not to Be Retaliated Against

We will not retaliate against you for exercising any CCPA right. This protection applies whether you are a consumer, a job applicant, an employee, or an independent contractor.

C. How to Exercise Your Rights

Submission Methods

To exercise the rights to know, delete, or correct described above, please submit a verifiable consumer request to [email protected]. You may submit no more than two right-to-know requests in a 12-month period.

Verification of Requests

Before we fulfill a request to know, delete, or correct, we must verify that the person making the request is the consumer about whom we have collected Personal Information or that person's authorized representative.

We cannot fulfill requests to know, delete, or correct if we cannot verify your identity or authority to make the request and confirm that the Personal Information at issue relates to you. We reserve the right to require additional information to complete verification. We also reserve the right to deny a request we reasonably believe is fraudulent or would compromise the security of Personal Information. Submitting a request does not require you to create an account with us. Personal information provided in a verifiable consumer request will be used only to verify your identity or authority and to respond to your request.

Response Timing and Format

We will acknowledge receipt of your request within ten (10) days and will endeavor to provide a substantive response within 45 days of receipt. If we require additional time, we will notify you in writing of the reason and the extension period, which will not exceed an additional 45 days. If you have an account with us, we will deliver our response to that account. If you do not have an account, we will deliver our response by mail or electronically, at your option.

Disclosures made in response to a request to know will cover the period from January 1, 2022, through the date we received your verifiable consumer request, or such shorter period as you specify.

We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that a request warrants a fee, we will notify you of that determination and provide a cost estimate before completing the request.

Authorized Agents

Only you, or a person or entity  that you have authorized in writing to act on your behalf, may submit a verifiable consumer request related to your Personal Information. If a request is made through an authorized agent, we reserve the right to require you: (1) to directly verify your identity with us; and (2) directly confirm to us that you have given the agent permission to submit the request. We may deny a request from an authorized agent who fails to provide adequate proof of authorization. You may also submit a verifiable consumer request on behalf of your minor child.

Opt-Out Out of Selling or Sharing 

You may opt out of selling or sharing by completing the “Do Not Sell My Information” form on our website. In addition, you may limit the amount of information we collect about you for marketing purposes by opting out of marketing cookies on our “Your Privacy Choices” tool.   

You may also opt out of selling and sharing by implementing an opt-out preference signal on your browser or device. We will honor your request if we recognize the signal as a request to opt out of selling and sharing. If your use of this signal conflicts with consent you have provided us in another format or with a financial incentive we offer you, we may notify you of the conflict. The signal is associated with the browser on which you have enabled the signal. You may need to take additional action to make sure that your request covers information we have about you that is not connected to that browser.

D. Notice of Financial Incentive

We offer our customers a loyalty program (the Plush Point Rewards program) that provides certain perks, such as rewards and exclusive offers. We may also provide other programs, such as sweepstakes, contest, or other similar promotional campaigns (collectively, the “Programs”). Our Terms of Service (https://warmies.com/pages/terms-and-conditions) provide more information about the Programs.

When you sign up for one of these Programs, we typically ask you to provide your name and contact information (such as email address and/or telephone number). Because our Programs involve the collection of personal information and offering of certain benefits, they might be interpreted as a “financial incentive” program under the CCPA. Under the CCPA, the value of your personal information to us is related to the value of the free or discounted products or services, or other benefits that you obtain or that are provided as part of the applicable Program, less the expense related to offering those products, services, and benefits to Program participants.

You may withdraw from participating in a Program at any time by contacting us using the designated method set forth in the applicable Program rules or by emailing us at [email protected].

E. Shine the Light

Under Cal. Civ. Code § 1798.83 (the “Shine the Light” law),  customers who are residents of California may request information concerning the categories of Personal Information (if any) we disclose to third parties or affiliates for their direct marketing purposes. If you would like more information, please submit a formal request to us at this email address: [email protected].

Contact for Privacy Questions

For questions or concerns about this policy or our privacy practices, please contact us at [email protected]

Last Updated:   September 15, 2026