Effective April 22, 2026
This Privacy Policy explains how The Cali Connection(“we,” “us”) collects, uses, discloses, and protects personal information in connection with thecaliconnection.com(the “Site”). By using the Site, you agree to this Policy and our Terms of Service.
We collect information in the following categories:
Where GDPR or UK GDPR applies, we process personal data under one or more of the following legal bases: performance of a contract (to process your order), legitimate interests (fraud prevention, service improvement), consent (marketing, non-essential cookies), and legal obligation (tax, record-keeping).
We do not sellor “share” personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). We disclose personal information only to:
We use strictly-necessary cookies for authentication, cart, and security, plus limited first-party analytics. See our Cookie Policy for details and how to manage preferences.
We retain order, payment, and tax records for as long as required by applicable law (typically 7 years for financial records). Account data is retained while your account is active and for a reasonable period thereafter; you can request deletion at any time (see Section 8). Security logs are retained for up to 12 months.
We use HTTPS/TLS in transit, encrypted storage at rest for credentials, bcrypt password hashing, tokenized payments (PCI SAQ A-EP scope), rate limiting on sensitive endpoints, and audit logging. No method of electronic transmission or storage is 100% secure. If we become aware of a breach that materially affects your personal information, we will notify you as required by law.
Depending on your jurisdiction, you may have rights to:
To exercise any right, email Sales@thecaliconnection.com. We will verify your identity before acting on the request and respond within the time required by applicable law (generally 45 days under CCPA/CPRA, 30 days under GDPR). You may also authorize an agent to submit a request on your behalf.
In the 12 months preceding the effective date, we have collected the categories of information listed in Section 1 from the sources and for the purposes listed in Section 2, and disclosed them to the service providers listed in Section 4. We have not sold and have not “shared” personal information as those terms are defined under the CCPA/CPRA, and we do not knowingly process the personal information of minors for sale or sharing.
Right to opt out of sale or sharing. Because we do not sell or share personal information, there is nothing to opt out of in the technical CCPA sense. If you would still like a written confirmation of your opt-out request, email Sales@thecaliconnection.com with the subject “Do Not Sell or Share My Personal Information” and we will honor the request.
Global Privacy Control (GPC). Our site honors the GPC browser signal as a valid opt-out — when present, analytics is automatically disabled and we treat it as a do-not-sell-or-share request for the duration of the session.
The Site is not directed to anyone under 21 and, as to individuals under the age of 13, we do not knowingly collect personal information in violation of the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13, we will delete it promptly.
The Site is operated in the United States and our infrastructure providers are US-based. If you access the Site from outside the US, your information will be transferred to, stored, and processed in the US. We do not ship internationally.
We may update this Policy from time to time. We will post the updated version on this page and update the “Effective” date. Material changes will be communicated by email or on-site notice where reasonable.
Privacy questions or requests: Sales@thecaliconnection.com or 818-433-2510. A mailing address is available on request.