California Privacy Notice (CCPA)
Introduction and Scope
Creditnorvella provides this notice to California residents under the California Consumer Privacy Act / California Privacy Rights Act ("CCPA/CPRA"). It describes how we collect, use, and disclose personal information about California consumers and what rights you have with respect to that information. This notice supplements — and should be read together with — our general Privacy Policy.
Categories of Personal Information Collected
Over the preceding twelve (12) months Creditnorvella has collected the categories of personal information described below. "Identifiers" — your IP address, browser fingerprint, and any email address you submit. "Customer records" — any name, email, or message you provide through forms. "Commercial information" — your newsletter subscription state. "Internet activity" — the pages you read and the referrer that brought you here. "Geolocation" — coarse city- or country-level derived from IP. "Inferences" — aggregated audience-segment estimates derived from reading behavior.
Sources of Personal Information
Creditnorvella gathers personal information from three sources only: directly from you (forms you complete on the site); automatically through your device interactions (page requests and cookie state); and indirectly from the service providers we use to operate the website (each of which we contract with under a data-protection agreement). We do not buy or rent personal information from outside parties.
Business and Commercial Purposes
Creditnorvella processes personal information for clearly defined business purposes: delivering the content you request; sending newsletter editions you have explicitly opted into; replying to messages submitted through our Contact and other forms; producing aggregated reports of site usage for editorial and advertising operations; securing the service against fraud and abuse; and complying with our legal and regulatory obligations under California and other applicable laws.
Disclosure to Service Providers and Third Parties
Creditnorvella discloses personal information only to a short list of service providers that act on our behalf and only for the business purposes outlined in this notice. These vendors are bound by contract to use the information solely for the contracted service and to delete it when their engagement ends or when it is no longer required to provide the service. We do not disclose personal information to any third party for that party's own marketing or commercial purposes.
Sale and Sharing of Personal Information
In compliance with the CCPA, Creditnorvella confirms that it has not sold or shared the personal information of California consumers (including consumers known to be under 16 years of age) in the past 12 months and does not intend to do so. "Sale" and "sharing" are interpreted as defined by the CCPA; sharing data with operational service providers under contract does not constitute a sale or sharing in that sense.
Sensitive Personal Information
We do not collect or process sensitive personal information as defined by the CCPA for the purpose of inferring characteristics about you. To the extent any sensitive personal information is incidentally collected (for example, if you voluntarily disclose it in a message), we use that information only for the business purpose for which it was provided and not for any additional uses requiring further consent under the CCPA.
Your California Privacy Rights
The CCPA grants California consumers a defined set of rights with respect to their personal information. You have the right to know what we collect, to request a copy of the specific pieces we hold, to correct inaccurate data, to request deletion, to opt out of any sale or sharing (we do not engage in either), to limit the use and disclosure of sensitive personal information, and to receive equal service and pricing regardless of whether you exercise any of these rights.
How to Exercise Your Rights
To exercise any of the rights described above, please submit a request through the Contact form linked in the site footer, or by email to the contact address listed on our Contact page. We will need to verify your identity to a degree of certainty proportional to the request — for newsletter records, confirming the email subscribed is usually sufficient; for broader access or deletion requests we may ask for additional information. We will respond within 45 days, or notify you if more time is needed (up to a further 45 days).
California consumers may use an authorized agent to exercise their CCPA rights. To process a request submitted by an agent, Creditnorvella requires the agent to provide signed written permission from the consumer or a power of attorney, plus reasonable verification of the consumer's identity. We may also contact the consumer to confirm that they have indeed authorized the agent to make the request.
Consumers Under 16 Years of Age
Creditnorvella does not sell or share personal information about consumers under the age of 16 and does not have actual knowledge of collecting personal information of children under 13. If we ever decided to sell or share personal information about consumers between the ages of 13 and 16, we would do so only with the affirmative authorization of the consumer (opt-in) as required by the CCPA. Parents and guardians may submit deletion requests on behalf of their children via the Contact form.
Right to Non-Discrimination
We are committed to the CCPA's anti-retaliation principle: Creditnorvella will treat California consumers equally regardless of whether they exercise their CCPA rights. There is no premium or paid tier where rights-exercising consumers receive a lesser experience — the editorial content is the same for everyone. We do not offer financial incentives in exchange for collecting personal information.
Retention of Personal Information
We retain each category of personal information only for as long as needed to fulfill the purpose for which it was collected, plus any retention required by applicable law. Specifically: newsletter subscribers' email addresses are retained until you unsubscribe (and then moved to a minimal suppression list); contact-form messages are retained for up to 24 months; server access logs are retained for up to 90 days; aggregated analytics data is retained indefinitely in non-identifying form.
Changes to This Notice and How to Reach Us
This California Privacy Notice may be updated periodically. The version on this page is always the current version, and the "Last updated" date shows when it took effect. To exercise any CCPA right or to ask a question about this notice, contact Creditnorvella through the Contact form linked in the footer of every page — that form routes directly to the editor responsible for privacy correspondence.