(1) Introduction, Scope & Applicability
This CCPA privacy notice ("CCPA Notice") applies to residents of California ("consumer(s)" or "you") and supplements and forms an integral part of Deep Roots Galaxy LTD ("Company", "we", "us" or "our") Privacy Policy.
This CCPA Notice provides the disclosures required under the California Privacy Rights Act of 2020 (the "CCPA") regarding our collection, use and disclosure of "personal information" as such term is defined under the CCPA, when you access, use, or otherwise interact with our website available at: https://deeprootsgalaxy.com/ ("website").
Definitions used in this CCPA Notice shall have the meanings assigned to them under the CCPA, or as defined in our Privacy Policy, as applicable. Any reference in our Privacy Policy to "Personal Data" shall also include "personal information" as defined under the CCPA, to the extent applicable.
(2) Categories of Personal Information We Collect
"Personal information" under the CCPA means information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
Personal information does not include: publicly available information from government records; de-identified or aggregated information; or information excluded from the scope of the CCPA (such as certain medical information regulated under HIPAA/CMIA, and information regulated by sector-specific laws such as FCRA, GLBA, FIPA and the Driver's Privacy Protection Act).
Category A – Identifiers
Examples: name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, and similar identifiers.
We may collect this category when you access or interact with our website (e.g., Online Identifiers such as IP address and cookie identifiers), and when you contact us via email (which may include your name and email address).
Category B – Personal Information (Cal. Civ. Code § 1798.80(e))
Examples: name, signature, address, telephone number, passport number, driver's license number, employment history, bank account number, medical or health insurance information, and similar information.
We may collect limited elements of this category if you contact us (e.g., name and phone number, if provided).
Category C – Protected Classification Characteristics
We do not collect this category.
Category D – Commercial Information
We do not collect this category.
Category E – Biometric Information
We do not collect this category.
Category F – Internet or Other Similar Network Activity
Examples: browsing history, search history, and interactions with a website, application or advertisement.
We may collect this category through Usage Data related to your interactions with the website and related marketing (e.g., access time/date, session duration, pages viewed, clickstream, referral URL or campaign source).
Category G – Geolocation Data
We may collect approximate location information derived from IP address.
Category H – Sensory Data
We may collect this category in limited cases (e.g., recorded communications), to the extent applicable and permitted by law.
Category I – Professional or Employment-Related Information
We do not collect this category.
Category J – Non-public Education Information
We do not collect this category.
Category K – Inferences Drawn from Other Personal Information
We do not collect this category.
Category L – Sensitive Personal Information
We do not collect this category.
(3) Categories of Sources of Personal Information
We may collect personal information from the following sources:
- Directly or indirectly from your activity on the website (e.g., usage data collected via measurement tools).
- Directly from you (e.g., if you email us).
- From third parties (e.g., vendors assisting with advertising, analytics or related services).
(4) How We Use Personal Information
We may use personal information for the following business purposes:
- To respond to inquiries and fulfill requests.
- To monitor and improve the website and its content.
- To analyze and understand usage patterns and marketing performance.
- To comply with legal obligations or law enforcement requests, where required.
- As otherwise described in our Privacy Policy (including Section 4 of our Privacy Policy: "The Data Sets Collected, Purpose of Use and Lawful Basis").
We will not collect additional categories of personal information or use the personal information collected for materially different purposes without providing notice as required by law.
(5) Disclosures of Personal Information for a Business Purpose
We may disclose personal information to contractors and service providers for a "business purpose". Where we do so, we enter contracts that limit use of personal information to the specific services provided and prohibit the recipient from "selling" or "sharing" such personal information.
The categories of personal information that may be disclosed for business purposes include:
- Auditing related to counting ad impressions: Categories A, F, G (advertising networks, analytics, social media).
- Security and integrity: Categories A, B, F, G (security/fraud prevention, operational partners).
- Debugging: Categories A, F, G (security and analytics providers).
- Short-term transient use: Categories A, F, G (advertising networks, analytics, social media).
- Performing services on behalf of the business: Categories A, B, F, G (cloud/hosting, CRM, customer support).
- Internal research and technological development: Categories A, F, G (cloud, SaaS tools, support/optimization).
- Quality and safety verification/maintenance: Categories A, B, F, G (cloud/hosting, security, support/optimization).
- Advertising and marketing services: Categories A, B, F, G (ad networks, analytics, social platforms, CRM).
- Advancing commercial or economic interests: Categories A, B, F, G (affiliates, advertising networks, analytics, social media).
(6) Sale or Share of Personal Information
We do not "sell" or "share" personal information in exchange for money in the ordinary sense.
However, we may use third-party advertising/analytics tools (e.g., cookies, pixels, tags) for retargeting, measurement and marketing. These practices may involve disclosing online identifiers and activity data to third parties for "cross-context behavioral advertising," which may be treated as a "sale" or "share" under the CCPA.
Categories involved in such activity may include: Category A, Category F, and Category G.
(7) Children Under Age 16
Our website is not intended for children, and we do not knowingly collect or sell personal information from children under the age of 16.
(8) Retention of Personal Information
We retain personal information only as long as reasonably necessary to:
- achieve the purposes for which it was collected;
- comply with legal obligations;
- resolve disputes or enforce agreements.
Except as required by law, we may delete personal information at any time and for any reason without notice.
(9) Your Rights Under the CCPA
If you are a California resident, you may have the following rights (subject to certain limitations and exceptions):
- Right to Know / Access (categories, sources, purposes, disclosures, and specific pieces of information).
- Right to Delete (subject to exceptions).
- Right to Correct inaccurate personal information.
- Right to Opt-Out of "Sale"/"Share" for cross-context behavioral advertising.
- Right to Limit Use/Disclosure of Sensitive Personal Information, where applicable.
- Right to Opt-Out of Certain Automated Decision-Making, where applicable.
- Right to Non-Discrimination for exercising your rights.
- Right to Data Portability, where applicable.
For general information regarding California privacy rights, you may review information published by the California Attorney General.
How Can You Exercise Your Rights? You may submit requests by contacting us at: [email protected]
Certain rights may also be exercised independently, for example:
- opting out of marketing emails using "unsubscribe" links (if applicable);
- managing cookie preferences using our cookie preference tools (if available on the website).
You may designate an authorized agent to submit requests on your behalf. We may require proof of authorization and verification of identity.
We will respond to verifiable consumer requests within 45 days. If additional time is required (up to an additional 45 days), we will notify you with an explanation.
(10) Other Rights Applicable to California Residents
California Direct Marketing Requests
California Civil Code Section 1798.83 permits California residents to request certain information about disclosures of personal information to third parties for direct marketing purposes. Requests may be submitted to: [email protected]
Do Not Track
There is no universally accepted standard for responding to "Do Not Track" signals. Accordingly, we do not respond to such signals. We may honor opt-out preference signals where required or supported.
(11) Notice of Financial Incentive
We do not offer financial incentives for the collection of personal information.
(12) Contact Us
If you have questions or concerns regarding this CCPA Notice, you may contact us at: [email protected]
Deep Roots Galaxy LTD
132 Menachem Begin Road
Tel Aviv - Jaffa, 6701101, Israel
(13) Updates
We may update this CCPA Notice as required (including at least once every 12 months, where applicable). The latest revision date will be reflected in the "Last Update" heading above.