Last updated: August 16, 2026. This notice describes our privacy practices for the preceding 12 months. Cascade Home Goods is a fictional home-goods retailer used to demonstrate CCPA/CPRA compliance. This site is its marketing and rewards site.
Categories of personal information we collect include identifiers, commercial information, internet activity, and sensitive personal information.
Identifiers means your email address and the online identifiers in advertising cookies. Commercial information means the purchase history our retail stores report into your rewards account. Internet activity means the pages you view on this site. Sensitive personal information means your rewards account log-in credentials, and nothing else.
| Category | Retention period |
|---|---|
| Identifiers | 24 months after your last interaction with us |
| Commercial information | 36 months, to administer rewards balances |
| Internet activity | 12 months |
| Sensitive personal information (log-in credentials) | For as long as your rewards account is open, then 30 days |
The purposes for which we collect your personal information are to provide and secure our services, to administer the rewards program, to personalize advertising, and to analyze site traffic.
The categories of sources from which we collect personal information are: directly from you when you open a rewards account or contact us, automatically from your device when you browse this site, and from our retail stores when you make a purchase using your rewards account.
We disclose personal information to third parties in the following categories: advertising networks and social media platforms, hosting providers, and infrastructure and security providers. We disclose personal information to service providers who process it on our behalf under written contract.
The categories of personal information we disclose to service providers for a business purpose are identifiers, commercial information, internet activity, and sensitive personal information. We disclose it for the business purposes of hosting this site, sending rewards program email, securing accounts, and measuring site traffic.
We share identifiers and internet activity with advertising networks and social media platforms for cross-context behavioral advertising. Under California law this is a share of personal information, and we disclose it here rather than describe it as something else. We do not share sensitive personal information for this purpose, and we do not receive money for it.
The business purpose for which we share this personal information is to show you Cascade Home Goods advertising on other websites and to measure whether that advertising works.
You have the right to know what personal information we have collected about you. That right covers the categories of personal information we collected, the categories of sources we collected it from, the business or commercial purpose for collecting, selling, or sharing it, the categories of third parties to whom we disclose it, and the specific pieces of personal information we hold about you.
You have the right to request deletion of the personal information we collected from you.
You have the right to request correction of inaccurate personal information that we maintain about you.
You have the right to opt out of the sale or sharing of your personal information.
You may exercise any of these rights on our Do Not Sell or Share My Personal Information page, or by emailing us at the address below.
You may designate an authorized agent to submit a request on your behalf. Your agent may submit the request through our Do Not Sell or Share My Personal Information page or by emailing us at hello@getprivisy.com, and must include your signed written permission for the agent to act for you. We may also ask you to verify your own identity with us directly. We do not require a power of attorney.
We verify your identity before responding to a request by matching the information you provide against the information in our records.
We will not discriminate or retaliate against you for exercising any of your privacy rights.
We stop sharing your personal information as soon as feasibly possible, and never later than 15 business days after we receive your request. On this site the advertising tags stop immediately, in the same page load.
We also notify every advertising partner that received your personal information between the time you made the request and the time we finished acting on it, direct them to comply with your request, and direct them to forward it to anyone they passed your information to.
We collect one category of sensitive personal information: your rewards account log-in credentials. We use it solely to authenticate you and to protect your account against unauthorized access.
We do not use or disclose sensitive personal information for purposes other than those set forth in section 7027, subsection (m), of the CCPA regulations — the purposes for which no right to limit has to be offered.
You have the right to limit our use and disclosure of your sensitive personal information. Because we already confine that use to the purposes listed above, there is nothing further to limit and we do not ask you to submit a request. If we ever use your log-in credentials for anything beyond securing your account, we will post a way to submit a limit request before we start.
We process opt-out preference signals, including Global Privacy Control (GPC), automatically and in a frictionless manner. When your browser sends a GPC signal, our advertising tags do not load, no advertising cookie is set, and we stop sharing your personal information.
A GPC signal applies to the browser or device that sends it, and to the pseudonymous advertising profiles tied to that browser or device. It is not tied to your rewards account: if you sign in to the same account from a second browser that does not send a signal, we treat that second browser as not opted out until it sends one or until you use the opt-out control on our Do Not Sell or Share page. A GPC signal does not reach purchases you make in our retail stores, because those are not shared for advertising in the first place.
To send a signal, use a browser that supports Global Privacy Control or install an extension that adds it, then turn the setting on. You do not need to tell us you have done so, and you do not need a rewards account. We publish a machine-readable declaration that we honor the signal at /.well-known/gpc.json.
Our services are intended for users 18 years of age and older. We do not sell or share the personal information of consumers under 16 years of age.
We offer a rewards program. Members earn 3% back on purchases made at our retail stores, redeemable as a discount on a later purchase. Because the program is worth money to you and gives us your purchase history, California law treats it as a financial incentive and requires us to explain its terms here.
The material terms of the rewards program are as follows: you may opt in to the rewards program by opening a rewards account on our rewards account page and checking the box that enrolls you, and you may withdraw from the rewards program at any time by emailing us at the address below. The categories of personal information collected under the program are identifiers, commercial information, and sensitive personal information.
Our good-faith estimate of the value of your personal information under this program is $18 per member per year. We calculated it using the expenditure method: we divided the total cost of the program to us over the last 12 months, which is the value of the discounts we issued, by the number of enrolled members. The 3% back you earn is therefore equal to the value we place on your data, which is how we satisfy ourselves that the program is reasonably related to that value rather than a penalty for keeping your data private.
Joining the rewards program does not require you to consent to the sale or sharing of your personal information. If you opt out of sharing, or send us a GPC signal, you keep every rewards benefit and we will never ask you to leave the program to make the signal work.
We do not use automated decision-making technology to make significant decisions concerning consumers.
Contact us about privacy at hello@getprivisy.com. You may use the same address to submit any request described above, or to withdraw from the rewards program.