California Privacy Disclosures

How this notice fits

This supplements our Privacy Policy for California residents. California rights depend on the law and the business’s circumstances. This notice does not represent that Heart-T-Hogs meets every CCPA/CPRA coverage threshold. Where those laws apply, their protections control.

Categories and purposes

We collect identifiers/contact details, customer record information, commercial/order history, account credentials, messages and internet/security activity. We obtain them from you, your use of the site and service/payment providers. We use them for fulfillment, accounts, communications, security and business recordkeeping. Password credentials are used for authentication, not profiling. We do not request government IDs, health details, precise location or EBT PINs through the site.

Disclosures, sale and sharing

The current website uses the service disclosures listed in our Privacy Policy. It does not sell personal information or share it for cross-context behavioral advertising. No opt-in advertising tracker is installed. Global Privacy Control and Do Not Track do not change essential operation: sale/sharing and advertising tracking remain off for every visitor. If our practices change, we will update notices and provide legally required controls before activating them.

Requests and rights

Where applicable, California rights include knowing/accessing personal information and its sources, purposes and recipients; correction; deletion subject to exceptions; opting out of sale/sharing; limiting certain uses of sensitive information; and freedom from unlawful discrimination for exercising rights. You may use an authorized agent; appropriate authorization and identity verification may be required. We use request details only to handle and document the request. Contact Heart-T-Hogs at (530) 708-0508 or support@heartthogs.com. Our store is at 1030 N Main St, Alturas, California. Please do not send passwords, full card numbers or EBT PINs.

Response process

Contact us by email or telephone; an account is not required to ask about privacy. We will explain any verification, applicable deadline, extension or exception. Where CCPA applies, we follow its request timing requirements, generally including acknowledgment within 10 business days and a substantive response within 45 calendar days for access, correction or deletion, subject to a permitted extension. California residents may also request information about disclosures for third parties’ direct marketing under applicable law; this store does not provide customer lists for that purpose.

Retention

We apply the purposes and retention criteria in the Privacy Policy to each category. Deletion is subject to necessary transaction, tax, safety, security and legal records. Browser storage durations are described in our Cookie and Device Storage Policy.

Payment and security data disclosures

Payment-related commercial records include order amounts, method, approval/refund status, references and manual-payment verification. App payments may disclose a payer name, app identifier and payment note to us. In-person SNAP records identify use of SNAP and the approved amount; we do not collect EBT card numbers, PINs or balances through the website. Cloudflare Turnstile and hosting services process network/browser security information. These categories support checkout, fulfillment, authentication, abuse prevention, reconciliation and required records, using the retention criteria in our Privacy Policy.

Recipients, when the relevant method or feature is used, include Stripe, Square, Cash App, Venmo, the authorized TotilPay/EBT payment systems, Cloudflare Turnstile and configured hosting/email/fulfillment services. Not every recipient is necessarily a service provider under California law: payment companies and security providers may also process information independently for purposes described in their notices. See the Privacy Policy for provider links, categories and purposes. Our no-sale/no-cross-context-advertising statement describes Heart-T-Hogs’ practices and does not make promises about independent provider-account practices. Contact the provider as well for requests concerning its independent records.