California Privacy Notice (CCPA)

Introduction and Scope

Creditmalvero provides this notice to California residents under the California Consumer Privacy Act / California Privacy Rights Act ("CCPA/CPRA"). It describes how we collect, use, and disclose personal information about California consumers and what rights you have with respect to that information. This notice supplements — and should be read together with — our general Privacy Policy.

Categories of Personal Information Collected

In the past twelve (12) months Creditmalvero may have collected the following categories of personal information from or about California consumers: identifiers (such as IP address and email address when you subscribe); internet or network activity (browsing history on the site, referring URL, time of request); geolocation data at the coarse-grained, city-level resolution derived from IP; commercial information (which newsletters you have subscribed to); inferences drawn from this information (such as aggregated content preferences); and audio or visual information only if you voluntarily submit it (for example, a photo attached to a tip you send through our Contact form).

Sources of Personal Information

We obtain the personal information described above directly from you (when you fill in a form or interact with the site), automatically from your device (when your browser requests pages and sends standard HTTP headers), and from a limited set of service providers that operate Creditmalvero on our behalf (such as our hosting provider, edge security provider, and email-delivery vendor). We do not buy personal information from data brokers.

Business and Commercial Purposes

We use the personal information identified above for the following business or commercial purposes, in each case as described to you at the point of collection: providing the editorial product (rendering pages, sending newsletters you have opted into); responding to your messages and inquiries; operating, maintaining, securing, and improving the site; producing aggregated readership analytics; serving advertising in a non-personalized form by default and, where applicable, with your consent; detecting and responding to security incidents; and complying with our legal obligations.

Disclosure to Service Providers and Third Parties

We disclose personal information to service providers under written contract for the business purposes outlined above. These currently include: our cloud hosting provider; our content-delivery network and edge security provider; our email-delivery vendor (for newsletter distribution); our web-analytics provider; and our advertising network (where ads are displayed). Each service provider is contractually prohibited from retaining, using, or disclosing the personal information for any purpose other than the specific services it provides to us.

Sale and Sharing of Personal Information

In compliance with the CCPA, Creditmalvero confirms that it has not sold or shared the personal information of California consumers (including consumers known to be under 16 years of age) in the past 12 months and does not intend to do so. "Sale" and "sharing" are interpreted as defined by the CCPA; sharing data with operational service providers under contract does not constitute a sale or sharing in that sense.

Sensitive Personal Information

We do not collect or process sensitive personal information as defined by the CCPA for the purpose of inferring characteristics about you. To the extent any sensitive personal information is incidentally collected (for example, if you voluntarily disclose it in a message), we use that information only for the business purpose for which it was provided and not for any additional uses requiring further consent under the CCPA.

Your California Privacy Rights

Under the CCPA, California consumers have the following rights: (1) the right to know what personal information we have collected about you, including the categories of information, the sources, the purposes, and the categories of third parties to which we disclose it; (2) the right to access the specific pieces of personal information we hold; (3) the right to correct inaccurate personal information; (4) the right to request deletion of personal information; (5) the right to opt out of any sale or sharing of personal information (we do not sell or share, but the right exists); (6) the right to limit the use of sensitive personal information; and (7) the right to non-discrimination for exercising any of these rights.

How to Exercise Your Rights

Verifiable consumer requests under the CCPA can be submitted to Creditmalvero through our Contact form or to the email address shown on the Contact page. To prevent fraudulent access requests, we will verify your identity using reasonable means tied to the data we hold — typically by confirming control of the email address tied to a subscription or by matching identifiers you provide against information already in our records. We respond to verified requests within the 45-day window required by the statute, with one 45-day extension where reasonably necessary.

An authorized agent (such as a privacy-rights service or an attorney) may submit a CCPA request on behalf of a California consumer. Creditmalvero will require written authorization from the consumer or a valid power of attorney, and may contact the consumer directly to confirm the request and verify identity. We may decline requests that do not meet the CCPA's authorization and verification requirements.

Consumers Under 16 Years of Age

We do not knowingly collect, sell, or share personal information about California consumers under 16 years of age. Our service is directed to adults. Should we ever change this practice (which we do not anticipate), we would do so only with the express opt-in consent required by the CCPA for consumers aged 13 to 15, or with parental opt-in consent for children under 13. Parents who suspect their child's data has been submitted can contact us for prompt deletion.

Right to Non-Discrimination

We are committed to the CCPA's anti-retaliation principle: Creditmalvero will treat California consumers equally regardless of whether they exercise their CCPA rights. There is no premium or paid tier where rights-exercising consumers receive a lesser experience — the editorial content is the same for everyone. We do not offer financial incentives in exchange for collecting personal information.

Retention of Personal Information

We retain each category of personal information only for as long as needed to fulfill the purpose for which it was collected, plus any retention required by applicable law. Specifically: newsletter subscribers' email addresses are retained until you unsubscribe (and then moved to a minimal suppression list); contact-form messages are retained for up to 24 months; server access logs are retained for up to 90 days; aggregated analytics data is retained indefinitely in non-identifying form.

Changes to This Notice and How to Reach Us

This California Privacy Notice may be updated periodically. The version on this page is always the current version, and the "Last updated" date shows when it took effect. To exercise any CCPA right or to ask a question about this notice, contact Creditmalvero through the Contact form linked in the footer of every page — that form routes directly to the editor responsible for privacy correspondence.