California Notice

California Consumer Privacy Act (CCPA)

A formal CCPA notice covering how OrderNewWindows handles the sale and sharing of personal information, plus the enhanced rights available to residents of California, Colorado, Connecticut, Utah, Iowa, Nevada, and Virginia.

This notice supplements the OrderNewWindows Privacy Policy and California Privacy Rights page. It is intended to give California consumers (and residents of other states with comparable privacy laws) a clear picture of how we handle the sale and sharing of personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Categories of personal information we collect

In the past twelve (12) months, OrderNewWindows has collected the following categories of personal information about California consumers:

• A. Identifiers — name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, driver's license number, passport number, or similar identifiers. YES
• B. California Customer Records categories (Cal. Civ. Code § 1798.80(e)) — name, address, telephone number, passport number, driver's license or state ID, credit or debit card number, or other financial information. May overlap with other categories. YES
• C. Protected classification characteristics — age (40+), race, color, ancestry, national origin, citizenship, religion, marital status, medical condition, disability, sex (including gender, pregnancy), sexual orientation, veteran status, or genetic information. NO
• D. Commercial information — records of products or services purchased, considered, or otherwise interacted with. YES
• E. Biometric information — fingerprints, faceprints, voiceprints, iris scans, keystroke or gait patterns, sleep, health, or exercise data. NO
• F. Internet or similar network activity — browsing and search history on our website and your interactions with our pages and ads. YES
• G. Geolocation data — physical location or movements. YES
• H. Sensory data — audio, electronic, visual, thermal, olfactory, or similar information. NO
• I. Professional or employment-related information — current or past job history or performance evaluations. NO
• J. Non-public education information (under FERPA, 20 U.S.C. § 1232g; 34 C.F.R. Part 99). NO
• K. Sensitive personal information — race or ethnic origin, religion, political affiliations, sexual orientation, criminal history. NO
• L. Inferences drawn from other personal information — profiles reflecting preferences, characteristics, predispositions, behavior, or attitudes. NO

What "sale" and "sharing" mean here

Under California law, a sale or sharing includes disclosing or transferring personal information to another business for monetary or other valuable consideration, including for lead generation, analytics, or advertising purposes. To deliver the quote-matching service you request, OrderNewWindows may share certain categories of personal information with our network of independent contractor partners (listed on our Partners page). You may opt out of this sharing at any time.

Your rights under the CCPA

If you are a California resident, you have the following rights with respect to personal information we hold about you:

Right to access

You may request information about (a) the categories of personal information we collect; (b) the sources we obtain it from; (c) the business or commercial purpose for collection or sale; (d) the categories we sell or share with third parties; (e) the categories of third parties who receive it; and (f) the specific pieces of personal information we hold about you. We will provide this information once we verify your identity.

Right to correct

You may request that we correct inaccurate personal information we hold about you, taking into account the nature of the information and the purposes for which it is processed. We will use commercially reasonable efforts to correct it as you direct.

Right to deletion

You may ask us to delete personal information we have collected, subject to exceptions allowed under the CCPA (for example, where we need the information to complete a transaction, comply with a legal obligation, or detect security incidents). Once we receive and confirm a verifiable request, we will delete the information from our records unless an exception applies.

Right to non-discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you services, charge you a different price, provide a different level of quality, or suggest that any of these will happen because you exercised your rights.

Right to opt out of sale or sharing

You may direct us not to sell or share your personal information to third parties at any time. If you opt out, we will stop sharing your personal information with our partner network for marketing or lead-generation purposes. You can opt back in at any time.

Right to limit the use of sensitive personal information

Sensitive Personal Information receives heightened protection under the CCPA. OrderNewWindows does not sell or share Sensitive Personal Information; we use it solely for the legitimate business purposes permitted by applicable law. You may request that the use of your Sensitive Personal Information be limited at any time by contacting us. We do not knowingly collect Sensitive Personal Information from Virginia or Colorado residents without consent. We do not collect, use, or disclose data such as racial or ethnic origin, health, or religious beliefs as defined under any state law; any submission of such data violates our Terms and will be deleted promptly.

Enhanced rights for Colorado, Connecticut, Utah, and Iowa residents

If you are a resident of Colorado, Connecticut, Utah, or Iowa, you may have additional rights under your state's privacy law:

• Right to appeal (Colorado & Connecticut). If we deny your privacy request, you may appeal within 45 days by emailing appeals@ordernewwindows.com with "Privacy Appeal" in the subject line.
• Universal opt-out via Global Privacy Control (GPC). OrderNewWindows honors the GPC browser signal. When GPC is enabled, your visit will be automatically treated as an opt-out of the sale and sharing of personal information for that browser and device.
• Data portability (Utah & Iowa). You may request a copy of your data in a machine-readable format (JSON or CSV) so it can be transferred to another controller.

How to exercise your rights

To exercise your right to know, access, correct, or delete personal information, please send a verifiable consumer request to privacy@ordernewwindows.com.

To exercise your right to opt out of the sale or sharing of personal information, you may use either the Do Not Sell My Info page or our footer link of the same name. You may also enable Global Privacy Control in your browser settings to opt out automatically.

Only you, or a person registered with the California Secretary of State whom you authorize to act on your behalf, may submit a verifiable consumer request related to your personal information. You may also submit one on behalf of your minor child. If you use an authorized agent, we may require proof of your written authorization and may verify the agent's identity. We may also require you to confirm your identity directly.

You may submit a verifiable consumer request to know or for access no more than twice within a 12-month period. The request must (1) provide enough information to allow us to reasonably confirm that you are the person whose information was collected (or that person's authorized representative), and (2) describe the request in enough detail that we can understand and act on it. We may need additional information to verify your request or its scope. You will not be required to create an account to submit or fulfill a request. We cannot respond if we cannot verify your identity or authority. We may decline to act on requests if we reasonably determine that you are not a California resident.

Response timing and format

We aim to respond within forty-five (45) days of receipt. If we need more time (up to ninety (90) days total), we will let you know in writing along with the reason and the extension period. Disclosures will cover the 12-month period preceding our receipt of your request. If we cannot fulfill all or part of your request, our response will explain why. For data portability requests, we will provide your information in a format that is readily usable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If a fee applies, we will explain the reasons and provide an estimate before proceeding.

Contact us

• Email: privacy@ordernewwindows.com
• Mail: OrderNewWindows, Attn: Privacy, 1 East Liberty Street, Suite 600, Reno, Nevada 89501