California Privacy Notice (CCPA)
Introduction and Scope
This California Privacy Notice supplements the Credipathway Privacy Policy and applies solely to visitors, users, and others who reside in the State of California ("California consumers" or "you"). We provide this notice to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (collectively, the "CCPA"). Terms defined in the CCPA have the same meaning when used in this notice.
Categories of Personal Information Collected
The categories of personal information that Credipathway has collected from California consumers during the past twelve months are: (a) identifiers such as IP addresses and email addresses; (b) personal-records information you submit voluntarily (name and message text in our forms); (c) commercial information (newsletter subscription history); (d) internet or other network activity information (browsing on our site, referring URL); (e) geolocation data of coarse precision; and (f) inferences drawn from the foregoing for the purpose of audience analytics. We do not knowingly collect biometric information, sensory data, professional or employment information, or education information.
Sources of Personal Information
Sources of the personal information we hold about California consumers include: you, directly (when you subscribe, contact us, or submit a tip); your browser and device (request headers, IP address, cookie identifiers); and our limited list of operational service providers (hosting, CDN, email delivery, analytics). Credipathway does not purchase personal information from data brokers or rent contact lists.
Business and Commercial Purposes
Credipathway processes personal information for clearly defined business purposes: delivering the content you request; sending newsletter editions you have explicitly opted into; replying to messages submitted through our Contact and other forms; producing aggregated reports of site usage for editorial and advertising operations; securing the service against fraud and abuse; and complying with our legal and regulatory obligations under California and other applicable laws.
Disclosure to Service Providers and Third Parties
Categories of third parties to which Credipathway discloses personal information (always under a service-provider or processor agreement) are: hosting, edge/CDN security, email service providers, web-analytics providers, and advertising networks. Each is contractually limited to the specific business purposes for which the information is disclosed and is prohibited from retaining, using, or disclosing the information beyond those purposes.
Sale and Sharing of Personal Information
Credipathway does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. In the preceding twelve (12) months we have not sold or shared the personal information of any California consumer, including any California consumer under the age of 16, and we have no actual knowledge of any such sale or sharing.
Sensitive Personal Information
We do not collect or process sensitive personal information as defined by the CCPA for the purpose of inferring characteristics about you. To the extent any sensitive personal information is incidentally collected (for example, if you voluntarily disclose it in a message), we use that information only for the business purpose for which it was provided and not for any additional uses requiring further consent under the CCPA.
Your California Privacy Rights
The CCPA grants California consumers a defined set of rights with respect to their personal information. You have the right to know what we collect, to request a copy of the specific pieces we hold, to correct inaccurate data, to request deletion, to opt out of any sale or sharing (we do not engage in either), to limit the use and disclosure of sensitive personal information, and to receive equal service and pricing regardless of whether you exercise any of these rights.
How to Exercise Your Rights
Requests to exercise CCPA rights should be sent to Credipathway via the Contact form or the email address listed on the Contact page. Because we hold only a limited amount of personal information about each consumer, verification is usually straightforward (we typically confirm access to a registered email). We aim to acknowledge requests within ten days and to substantively respond within the 45-day statutory deadline; a single 45-day extension is available when reasonably necessary and we will tell you if we need to use it.
An authorized agent (such as a privacy-rights service or an attorney) may submit a CCPA request on behalf of a California consumer. Credipathway will require written authorization from the consumer or a valid power of attorney, and may contact the consumer directly to confirm the request and verify identity. We may decline requests that do not meet the CCPA's authorization and verification requirements.
Consumers Under 16 Years of Age
We do not knowingly collect, sell, or share personal information about California consumers under 16 years of age. Our service is directed to adults. Should we ever change this practice (which we do not anticipate), we would do so only with the express opt-in consent required by the CCPA for consumers aged 13 to 15, or with parental opt-in consent for children under 13. Parents who suspect their child's data has been submitted can contact us for prompt deletion.
Right to Non-Discrimination
We are committed to the CCPA's anti-retaliation principle: Credipathway will treat California consumers equally regardless of whether they exercise their CCPA rights. There is no premium or paid tier where rights-exercising consumers receive a lesser experience — the editorial content is the same for everyone. We do not offer financial incentives in exchange for collecting personal information.
Retention of Personal Information
Credipathway follows a proportional retention policy. Newsletter records remain only while the subscription is active, with a minimal suppression entry kept post-unsubscribe to prevent accidental re-add. Contact-form records are retained for up to 24 months for follow-up and recordkeeping. Server logs are kept no longer than 90 days. Any aggregated analytics dataset that contains no identifiers is retained for long-term editorial planning.
Changes to This Notice and How to Reach Us
This California Privacy Notice may be updated periodically. The version on this page is always the current version, and the "Last updated" date shows when it took effect. To exercise any CCPA right or to ask a question about this notice, contact Credipathway through the Contact form linked in the footer of every page — that form routes directly to the editor responsible for privacy correspondence.