X. CALIFORNIA USERS: YOUR CALIFORNIA PRIVACY RIGHTS

California Shine the Light Law
California Civil Code Section 1798.83, known as the Shine the Light Law, requires us to disclose that California customers may request information concerning whether a business has disclosed personal data (as defined in the Shine the Light law) to any third parties for their direct marketing purposes. We do not disclose your personal data (as defined in the Shine the Light law) to non-affiliated companies for their direct marketing purposes without your consent.
California Consumer Privacy Act
Under the California Consumer Privacy Act (“CCPA”), California Civil Code sections 1798.100-1798.199, California residents have specific rights related to the information we collect or maintain about you. The rights of California residents pursuant to the CCPA are further described below. This California specific portion of the Privacy Policy was last updated on June 01, 2020. Any changes will be effective immediately upon the posting of the revised Privacy Policy. 
X.1 Notice of Collection.
We may collect information about consumers in following categories of personal data that identifies, relates to, describes, or is capable of being associated with a particular individual, as defined by the California Consumer Privacy Act. We may use this information we collect for the business or commercial purposes described below. Over the past 12 months we have collected such information from the following sources, for the following business or commercial purposes, and have shared that information with the following categories of third parties.

Categories of Information:
Sources from which we collected this information:
Business Purposes for which we collect this information:
Third parties with whom we shared this information with:
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security Number, driver’s license number, passport number, or other similar identifiers such as signature and physical characteristics We collect this information directly from consumers when they interact with our website, including when consumers create an account or place an order. We collect this information when consumers call us with a customer service inquiry. We also collect this information from third parties who supply us with this information. To create a consumer account. To complete a transaction with a consumer. To market to our products and services to consumers. To respond to consumer service inquires. To prevent fraud. We share this information with shipping companies, fraud prevention services, and email marketing services.
Financial information, such as credit card or other payment information; We collect this information when consumers provide it to us, including when they make an account or place an order. This information is used to create an account, or to complete a transaction. We use this information in the context of fraud prevention. We share this information with credit card processing businesses.
Commercial Information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies We collect this information when consumers interacts with our website, including when consumers: make a purchase; view a page on our website; search on our website; add products to their cart. We also collect this information from third parties who supply us with this information.
 To gain insight into the characteristics, interests, and behaviors of consumers. To market our products and services to consumers. To complete transactions. For customer service. We share this information with third party email marketing and advertisement services.
Internet or electronic network activity information, information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement We collect this information when consumers interacts with our website, including when consumers: make a purchase; view a page on our website; search on our website; or add products to their cart. We also collect this information from third parties who supply us with this information. To gain insight into the characteristics, interests, and behaviors of consumers. To market our products and services to consumers. We share this information with third party email marketing and advertisement services.
Audio, electronic, visual, thermal, olfactory, or similar information We collect this information when consumers make customer service inquires. To answer customer service inquires and improve customer service. We do not share this information with any third parties.
Geolocation data We collect this information when a consumer makes a purchase. We use this information to complete consumer transactions, including currency selection and in the context of fraud prevention. We share this information with third party fraud prevention services.
Professional or employment related information We collect this information when a consumer provides it to us by including a business address when they create an account or place a transaction. To complete a transaction. We share this information with shipping companies.
Inferences drawn to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes We collect this information when consumers interact with our website, including when consumers: make a purchase; view a page on our website; search on our website; or add products to their cart. To gain insight into the characteristics, interests, and behaviors of consumers. To market our products and services to consumers. We share this information with third party email marketing and advertisement services.

We may also use any of the information we collect from consumers in order to:
  • Provide customer service and technical assistance and respond to questions related to our products and services;
  • Conduct internal research and development and make business decisions about current and future product and service offerings;
  • Debug and repair errors in our products and services and other activities to maintain and improve the quality and safety of our products and services;
  • Cooperate with law enforcement and protect the rights, interests, safety or property of us or our customers, service providers and other third parties;
  • Comply with and enforce applicable legal and regulatory obligations, and respond to governmental requests;
  • Enforce our policies, terms and conditions, or other agreements; and
  • Defend against or pursue claims, disputes, or litigation – in court or elsewhere.
  • We may disclose or transfer personal data about consumers as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which case the personal data could be transferred to third parties as a business asset in the transaction – subject to the terms of this privacy policy.
X.2 Your Right to Know About Personal Information Collected or Disclosed
a. Your Right to Request Information. You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you.  You may make a request for this information twice within a 12-month period.  You may request any or all of the following: The categories your personal information we has collected about you in the preceding 12 months; the categories of sources from which the personal information has been collected about you in the preceding 12 months; the business or commercial purpose for collecting or selling your personal information in the preceding 12 months; the categories of third parties with whom we have shared your personal information in the preceding 12 months; the categories of your personal information that we sold and the categories of third parties to whom the personal information was sold in the preceding 12 months, listed by category or categories of personal information for each third party to whom your personal information was sold; the categories of your personal information that we disclosed for a business purpose in the preceding 12 months; and/or the specific pieces of personal information we have collected about you.
b. Instructions for Requesting Information. In order to make a request for information pursuant to this section please fill out the form on https://www.xrllc.com/ccpa. You can submit the form online or print it out and mail it to our address below.  You may also request information by calling us toll-free at 18663630688, emailing us at ccpa@xrllc.com, or contacting us via postal mail at the following address:
XRLLC
15251 Pipeline Lane
CCPA
Huntington Beach, CA 92649
In your request, state what information you are requesting. Please provide us with an email address for us to contract you at. If you do not have an email address, please provide a telephone number, and/or postal mailing address for us to contact you at. 
c. Verification Process. To process requests about categories of information about you, we require that you provide at least two pieces of personal information that match the personal information we maintain about you. 
For requests about specific pieces of information about you, we require you to provide us with three pieces of personal information that match the personal information we maintain about you. In addition, we will require that you provide us with a signed and notarized declaration under the penalty of perjury stating that you are the person whose records you are requesting.
X.3 Disclosure or Sale of Personal Information
We have not sold any personal information to third parties for a business or commercial purpose in the preceding 12 months.  We do not knowingly collect nor sell the personal information of minors under 18 years of age.
X.4 Your Right to Request Deletion of Personal Information
a. Your Right to Delete Information.  You have the right to request that we delete any personal information about you which we have collected from you or which we maintain that identifies, relates to, describes, is capable of being associated with, or could be reasonably linked, directly or indirectly, with you or your household.  We are not required to comply with a request to delete the personal information if it is necessary us to maintain your personal information in order to:
  • Complete the transaction for which the personal information was collected, provide a good or service requested by you, or reasonably anticipated within the context of a business’s ongoing business relationship with you, or otherwise perform a contract between you and us.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
  • Debug to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent.
  • To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on your relationship with the business.
  • Comply with a legal obligation.
  • Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
b. Instructions for Requesting Your Information be Deleted. In order to make a request to delete personal information pursuant to this section please fill out the form on https://www.xrllc.com/ccpa. You may also request your information be deleted by calling us toll-free at 18663630688, emailing us at ccpa@xrllc.com, or contacting us via postal mail at the following address:
XRLLC
15251 Pipeline Lane
CCPA
Huntington Beach, CA 92649
In your request, specify what information you are requesting be deleted or state that you are requesting all information we have collected or maintain about you be deleted. Please provide us with an email address to contact you at. If you do not have an email address, please provide either a telephone number and/or postal mailing address to contact you. 
c. Verification Process. Requests will be verified in one of two ways depending upon our good faith belief as to the harm unauthorized deletion of this information may pose to you.  For requests to delete that pose a low risk of harm to you should the deletion be unauthorized, for example a deletion of your browsing history on our website, we will require that you provide at least two pieces of personal information that match the personal information we maintain about you.
For requests which pose a high risk of harm to you should the deletion be unauthorized, for example the deletion of your customer account, we will require you provide us with three pieces of personal information that match the personal information we maintain about you. In addition, we will require that you provide us with a signed and notarized declaration from under the penalty of perjury stating that you are the person whose records you seek to delete.
X.5 Right to Opt-Out of the Sale of Personal Information
We do not provide a mechanism for opting-out of the sale of your personal information because do not, and will not, sell personal information we collect.  If we decide to sell personal information in the future, we will provide a notice of right to opt-out in this privacy policy.  We do not, and will not, sell personal information collected during the time period during which a notice of opt-out is not posted.
X.6 Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights
We will not discriminate against you because you have exercised any of your consumer’s rights, including, but not limited to:
  • Denying goods or services to you;
  • Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
  • Providing a different level or quality of goods or services to you; and/or
  • Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
X.7 Authorized Agent
You may designate an authorized agent to make a request under the California Consumer Protection Act by providing the authorized agent written permission to do so or when you have provided the authorized agent power of attorney pursuant to Probate Code sections 4000 to 4465.  We will require the authorized agent to submit proof that they have been authorized by you to act on their behalf, and, except in cases where you have provided the authorized agent power of attorney, we may require that you verify your identity with us. 
X.8 Notice of Financial Incentive.
We do not currently offer financial incentives or price or service differences online to consumer in exchange for the retention and/or sale of their information.
X.9 Exceptions
We may aggregate and/or de-identify your information so that the information no longer relates to you individually. Our use and disclosure of such aggregated or de-identified information is not subject to this Privacy Policy, and may be disclosed to others without limitation and for any purpose.
X.10 Consumers with disabilities
California consumers with disabilities my contact us by phone at 18663630688 or email us at ccpa@xrllc.com for information on how to access this notice in an alternative format.
X.11 Contact Us
If you have any questions or concerns about any aspect of this Privacy Policy or our privacy practices, or if you would like to exercise the choices discussed above, please contact us at the address set forth below or email us at ccpa@xrllc.com:
XRLLC
15251 Pipeline Lane
CCPA
Huntington Beach, CA 92649

Account Deletion
Data Access