California Privacy Rights

Last updated: Aug 27, 2026

This California Privacy Rights notice supplements the Merlot Marketing Privacy Center for people who live in California. It describes our personal-information practices and the choices and rights available under California law. Some rights described below apply only when Merlot Marketing, Inc. (“Merlot Marketing,” “we,” “us,” or “our”) is subject to the California Consumer Privacy Act (“CCPA”).

Personal Information Collected

In the preceding 12 months, we may have collected the following categories of personal information through our website and related business communications:

  • Identifiers, such as name, email address, phone number, Internet Protocol (IP) address, device identifiers, and cookie or similar identifiers.
  • Customer-record information, such as contact details and the content of communications or inquiries.
  • Commercial, professional, and employment-related information, such as company, job title, service interests, referral details, newsletter preferences, and application materials you choose to send in response to a job posting.
  • Internet or other electronic-network activity, such as referring pages, pages viewed, links selected, interactions, timestamps, and activity collected through cookies, tags, pixels, scripts, or similar technologies.
  • Approximate geolocation derived from an Internet Protocol (IP) address.
  • Inferences drawn from website activity or business information, such as possible professional interests or interest in our services.

We do not intentionally request sensitive personal information, Social Security numbers, financial account details, health information, account credentials, or protected-class information through public website forms. Please do not include that information in an open message field or employment inquiry.

Sources of Personal Information

We may collect personal information:

  • Directly from you when you contact us, subscribe, communicate with us, or submit employment materials.
  • Automatically from your browser or device when you use the website.
  • From service providers, marketing and measurement partners, referrals, clients, public sources, and business databases.
  • From business visitor-identification services that may associate website activity with professional or business contact information.

Purposes for Collection and Use

We may collect and use these categories to:

  • Operate, secure, troubleshoot, and improve the website.
  • Respond to inquiries, arrange meetings, prepare proposals, and evaluate possible business relationships.
  • Send requested or permitted communications and manage newsletter preferences.
  • Measure website and marketing performance and understand business interest in our services.
  • Review employment inquiries and communicate about opportunities.
  • Prevent misuse, investigate security issues, comply with law, enforce agreements, and protect rights and safety.
  • Support a merger, financing, sale, reorganization, or other business transaction.

Retention

We retain each category only as long as reasonably necessary for the purposes described above. We consider the nature of the information, our relationship and communications with you, legal and contractual duties, security and dispute needs, and backup cycles. We delete or deidentify information when it is no longer reasonably needed, subject to legal requirements and practical limits for backups.

Disclosure for Business Purposes

We may disclose the categories described above for business purposes to service providers and contractors that support hosting, security, website forms, email, analytics, marketing, business visitor identification, accessibility tools, media, employment communications, and other operations. We may also disclose information to professional advisers, authorities, transaction participants, and other parties when you direct us or when reasonably necessary to protect rights, safety, or the business.

Sale and Sharing

We do not sell personal information for money. Our website has used analytics, marketing, and business visitor-identification tools. Depending on how a provider uses information and the contract that governs it, disclosures involving identifiers, Internet or network activity, approximate location, professional information, and related inferences may be considered a “sale” or “sharing” under the CCPA, even when no money changes hands.

Where the CCPA applies, you may opt out through Your Privacy Choices or a recognized Global Privacy Control signal. We do not knowingly sell or share the personal information of anyone under 16.

Your California Privacy Rights

Subject to legal limits and exceptions, California residents may have the right to:

  • Know the categories and specific pieces of personal information collected about them, the sources, the purposes, and the categories of third parties involved.
  • Receive a portable copy of certain personal information.
  • Request deletion of personal information.
  • Request correction of inaccurate personal information.
  • Opt out of the sale or sharing of personal information.
  • Limit certain uses and disclosures of sensitive personal information when that right applies.
  • Not receive discriminatory treatment for exercising a privacy right.

How to Submit a Request

To request access, a copy, deletion, or correction, email hello@merlotmarketing.com with “California Privacy Request” in the subject line. For questions, you may also call (916) 285-9835.

To opt out of sale or sharing, use Manage Cookie Preferences in the website footer cookie widget. You do not need to create an account. We do not require identity verification for an opt-out request, although we may need information to understand and apply the request.

Global Privacy Control

Where required by law, we treat a recognized Global Privacy Control signal as a request to opt out of sale or sharing for the browser or device that sends it. If we cannot connect the signal to other information about you, the choice applies only to that browser or device. You can also use Your Privacy Choices to make or review a selection.

Verification and Response Timing

For access, copy, deletion, or correction requests, we may ask for information that reasonably matches records we maintain. We use verification information only to process and protect the request. If we cannot verify a request, we will explain what we can do.

When the CCPA applies, we will confirm receipt within 10 business days and generally respond within 45 calendar days. If we reasonably need up to 45 additional calendar days, we will tell you during the first response period and explain why. We may deny or limit a request when the law allows or requires it, and we will explain the basis when required.

Authorized Agents

You may use an authorized agent to submit a request. We may require proof that the agent has authority to act for you and may ask you to confirm your identity or the permission directly. We do not require verification of an opt-out request, but we may request proof of an agent’s authority.

Sensitive Personal Information

We do not intentionally collect or use sensitive personal information through the public website for purposes that trigger a right to limit under the CCPA. If our practices change, we will update this notice and provide a Limit the Use of My Sensitive Personal Information choice when required.

Financial Incentives

We do not currently offer a financial incentive or a price or service difference in exchange for personal information through this website.

Contact and Updates

For privacy questions, contact Merlot Marketing, Inc. at hello@merlotmarketing.com or (916) 285-9835. We may update this notice as our practices or legal duties change. We will post the revised notice here and change the Last updated date.