Last updated: 2026-04-17 · Effective: 2026-04-17 · Applies to California residents
This notice supplements our Privacy Policy and is provided to California residents under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA / CPRA").
In the past 12 months we have collected the following categories of personal information about California residents, as defined by Cal. Civ. Code § 1798.140(v):
| Category | Examples | Collected? | Sold / Shared? |
|---|---|---|---|
| A. Identifiers | Name, email, account ID, IP address | Yes | No |
| B. Customer records (§ 1798.80(e)) | Contact info for estimator/builder submissions | Yes | No |
| C. Protected classifications | Age, gender, race, ethnicity, disability | No | No |
| D. Commercial information | Estimator inputs, project details you submit | Yes | No |
| E. Biometric information | Fingerprints, voiceprints, etc. | No | No |
| F. Internet / electronic activity | Pages viewed, scroll depth, time on page, referrer | Yes | No |
| G. Geolocation | Approximate city/region from IP address | Yes (coarse only) | No |
| H. Sensory data | Audio, video | No | No |
| I. Professional / employment | Firm name, role, title (investor/distributor applications) | Yes | No |
| J. Education information | Covered by FERPA | No | No |
| K. Inferences drawn | Profile predicting preferences | No | No |
| L. Sensitive personal information | SSN, precise geolocation, account credentials, race/religion/health, sexual orientation, etc. | Password only (bcrypt-hashed, never in plaintext) | No |
You may request that we disclose: (a) the categories of personal information we have collected about you; (b) the categories of sources; (c) the business or commercial purposes for collecting; (d) the categories of third parties with whom we share; (e) the specific pieces of personal information we have collected.
You may request that we correct inaccurate personal information. For account profile data, you can also self-serve via the change-password / profile-edit screens.
You may request that we delete personal information we collected from you, subject to exceptions (e.g., we must retain records needed to complete a transaction, detect security incidents, comply with law, or as part of our auditable NCNDA access log).
We do not sell or share personal information. No opt-out is required, but if your browser sends a Global Privacy Control signal we honor it anyway.
We only collect sensitive personal information strictly necessary to provide the service (your bcrypt-hashed password), so this right does not add anything in our case — we already apply the most restrictive use.
We will not deny you service, charge you a different price, or provide a different level of quality because you exercised a CCPA / CPRA right.
Submit a request by either:
We will verify your identity before processing. For most requests that means matching the email address on your account + a one-time confirmation link. For deletion requests involving sensitive or financial records, we may require additional verification (government-issued ID).
You may designate an authorized agent to make a CCPA / CPRA request on your behalf by providing the agent with written permission (or a valid power of attorney) and completing our identity-verification steps.
We do not knowingly sell or share personal information of consumers under 16. Because we do not sell or share personal information at all, this is automatic.
We do not offer financial incentives or price differences in exchange for personal information. California's "Shine the Light" law (Cal. Civ. Code § 1798.83) — we do not disclose personal information to third parties for their direct-marketing purposes, so no Shine-the-Light opt-out is required.
If we change our practices in a way that affects California residents, we will update this notice and the "Last updated" date, and notify active accounts by email.
Privacy Team: info@blokusa.com · 504-913-3606 · Lok-N-Blok Systems LLC