California Privacy Rights
Rocking Lucas (“we,” “us,” or “our”) | rockinglucas.com
Last updated: 27/09/2026
This page supplements our Privacy Policy and applies to residents of California. It describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), and California’s “Shine the Light” law.
1. Personal Information We Collect
In the past 12 months, we have collected the following categories of personal information, only when you make a purchase, create an account, or contact us, or automatically when you visit the Site:
| Category (CCPA) | Examples | Collected? |
|---|---|---|
| Identifiers | Name, email address, phone number, postal address, IP address, account username | Yes |
| Customer records | Billing and shipping address, phone number | Yes |
| Commercial information | Products purchased, order history | Yes |
| Internet or network activity | Pages viewed, browser and device type, referring pages, cookie data | Yes |
| Sensitive personal information | Account login credentials (password) | Yes |
| Financial information | Payment card details | No. Collected and processed by Stripe, not stored by us |
| Geolocation, biometric, health data, or protected-class data | No |
Sources: directly from you, and automatically from your browser or device through cookies and similar technologies.
2. How We Use and Disclose Personal Information
We use personal information to process and deliver orders, manage accounts, provide customer support, prevent fraud and abuse, analyze and improve the Site, and comply with legal obligations (see Section 2 of our Privacy Policy).
In the past 12 months, we have disclosed personal information for business purposes to:
- Payment processor (Stripe): identifiers, commercial information
- Shipping carriers and fulfillment partners: identifiers, customer records
- Analytics provider (Google Analytics): internet or network activity, identifiers such as IP address
- Security and hosting providers (Cloudflare, our web host, google): identifiers, internet, or network activity
- Legal and government authorities, when required by law
We use sensitive personal information (account credentials) only to provide the account services you request, and not to infer characteristics about you.
3. We Do Not Sell Personal Information
We do not sell personal information, including the personal information of consumers under 16 years of age. We do not knowingly share personal information for cross-context behavioral advertising. If this changes, we will update this page and provide a “Do Not Sell or Share My Personal Information” link.
4. Your California Privacy Rights
You have the right to:
- Know / Access: request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to
- Delete: request deletion of personal information we collected from you, subject to legal exceptions (for example, we may keep order records for tax and accounting purposes)
- Correct: request correction of inaccurate personal information
- Opt out of sale or sharing: we do not sell or share personal information, but you may still contact us to confirm
- Limit use of sensitive personal information: we use it only for permitted purposes, so no limit link is needed
- Non-discrimination: we will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised your rights
5. How to Submit a Request
Email us at contact@rockinglucas.com with the subject line “California Privacy Request,” and tell us which right you want to exercise. You may also use your account to view or update your information.
- Verification: to protect your data, we will ask for information that lets us match you to our records (such as the email address and order number associated with your account). We cannot fulfill a request we cannot verify.
- Timing: we will confirm receipt within 10 business days and respond within 45 days. If we need more time, we may extend by up to 45 additional days and will tell you why.
- Authorized agents: you may use an authorized agent to submit a request for you. We may require written proof of your permission and verify your identity directly with you.
- Appeals: if we deny your request, you may reply to our response to ask us to reconsider.
6. Cookies, Global Privacy Control, and Do Not Track
We use cookies and similar technologies for Site functionality, security, and analytics (see Section 5 of our Privacy Policy). You can manage cookies in your browser settings and opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on. Our Site does not currently respond to “Do Not Track” browser signals, because there is no common standard for them.
7. Data Retention
We keep each category of personal information only as long as needed for the purposes described in our Privacy Policy, including to fulfill orders, provide support, and meet legal, tax, and accounting requirements. Order records are typically retained for 5 years.
8. California “Shine the Light” Law
California Civil Code Section 1798.83 lets California residents ask businesses that share personal information with third parties for their direct marketing purposes to disclose what was shared and with whom. We do not share personal information with third parties for their direct marketing purposes.
9. Changes to This Page
We may update this page from time to time. The “Last updated” date above shows when it last changed.
10. Contact Us
Rocking Lucas Email: contact@rockinglucas.com Website: Contact Form