California Privacy Policy

Last updated on October 25, 2025

Under the California Consumer Privacy Act (“CCPA”), California residents have the right to know and request access to their personal information collected and shared within the past 12 months, and to delete their personal information in accordance with the CCPA. We will not discriminate against you if you choose to exercise any of your rights under the CCPA.

How to submit a request to know, access, or delete?

If you are a California resident and would like to submit a request to know, access, delete your personal information, or correct inaccurate personal information collected by the business you can submit a request by:

  1. contacting us at the following email address Privacy@WinkScrubs.com; or
  2. completing the following online form: Online Form.

What happens after you submit a request to know, access, or delete?

Once we receive your request, we must first take commercially reasonable steps to verify your identity, including asking you to provide us with information to confirm your identity using the information we have on file. If you wish to designate an authorized agent to make a request on your behalf, please indicate that when submitting your request.

We will make good faith efforts to respond to your request. There may be circumstances under the CCPA in which we cannot, or need not, respond to your request. For example, we are not required to delete personal information needed to

  • complete the transaction for which the personal information was collected (such as completing a sale),
  • detect fraudulent or illegal activity, or
  • legal compliance purposes.

We are also not required to provide access or deletion where

  • your identity could not be verified,
  • you have exceeded the number of requests you can make within a twelve-month period, or
  • where the information contains legally privileged material or would violate the rights of others.

If we determine that your request should be restricted in any particular instance, we will provide you with an explanation of why that determination has been made and a contact point for any further inquiries.

Any requests that can be processed by us will be done so in no more than 45 days from the date we receive your request, unless we notify you that an extension is required. In case of an extended completion period, we will process your request in no more than 90 days from the date of your original request. Consumers are limited to two requests to know/access their personal information within a 12-month period.

Personal Information collected, used, and disclosed within the past 12 months

Without having to submit a request to access your personal information, you have the right to know what categories of personal information we have collected from consumers generally within the past 12 months, where we got it, why we collected it, and with whom we shared it.

We may, but do not necessarily, collect the following:

  • Identifiers (e.g., name, mailing address, email address, phone number, credit/debit card number)
  • Demographics (e.g., age, sex, race, date of birth, education, occupation)
  • Commercial information (e.g., products or services purchased, purchase history)
  • Internet or other electronic network activity (e.g., browse or search history)
  • Geolocation data (e.g., latitude or longitude)
  • Audio, electronic, visual, or similar
    information (e.g., recording of Guest service calls)
  • Inferences drawn from any of the above (e.g., preferences or characteristics)

We may collect and share this personal information to perform the following:

  • Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytics services, providing storage or providing similar services;
  • Providing advertising and marketing services;
  • Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;
  • Short-term, transient use, such as
    non-personalized advertising shown as part of your current interaction with us;
  • Helping to ensure security and integrity;
  • Debugging to identify and repair errors that impair existing intended functionality;
  • Undertaking internal research for technological
    development and demonstration; and
  • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled
    by us.

We do not sell any personal information.

We do not knowingly sell or share the personal information of people under the age of 16.