This Policy describes how information obtained from California consumers, including visitors to the www.bodyworkbyrafa.com website (the “Website”) and the independently owned and operated Massage BodyWorkbyRafa® franchised locations, where applicable, is collected, used, sold, and disclosed. This Policy also explains how you can make requests of BodyWorkbyRafa to know about your personal information, delete your personal information, and opt-out of the sale of your personal information. Please note that this Policy applies to information collected by BodyWorkbyRafa and/or independently owned and operated BodyWorkbyRafa ® franchised locations, where applicable. Terms included in this Policy, including but not limited to, Personal Information and Service Provider, carry the same meaning in this Policy as they do in the CCPA.
Subject to certain limits under California Civil Code section 1798.83, California residents may ask BodyWorkbyRafa to provide them with (i) a list of certain categories of personal data that we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, and (ii) the identity of those third parties. California residents may make one request per calendar year.
To make this request, you may contact BodyWorkbyRafa at the mail or email address listed in the “Contact Us for More Information” section below. In your request, please state that you are a California resident and provide a current California address for our response. Please allow up to thirty (30) days for a response. BodyWorkbyRafa reserves its right not to respond to such requests submitted to addresses other than those specified in the “Contact Us for More Information” section below.
If you are a California resident, you have certain rights regarding information that is treated as Personal Information under the California Consumer Privacy Act of 2018, California Civil Code sections 1798.100 et seq. (“CCPA”).
The right to know what categories of Personal Information are being collected, sold, or disclosed and the categories of sources of that Personal Information.
You have the right to know what categories of Personal Information we collect, sell, or disclose about you, as well as the categories of third parties who purchased or received your Personal Information and the categories of sources of that Personal Information. These categories are described below in the “Categories of California Consumers’ Personal Information Collected, Sold, or Disclosed” section below. We are also required to provide to you, before or at the point of collection, with a general notice about the categories of Personal Information collected by us and how we intend to use the collected Personal Information.
The right to access collected Personal Information
You have the right to request that we provide a copy of your Personal Information that we collected, sold, or disclosed in the preceding twelve (12) months. Only you, or someone you legally authorize to act on your behalf, may make a request related to your Personal Information. You may submit a maximum of two requests in a 12-month period.
You must provide sufficient information to enable us to reasonably verify your identity or that of your authorized agent. We will only use the Personal Information provided in your request to verify your identity or that of your authorized agent. Please note that we cannot provide any Personal Information in response to a request if we cannot verify your or your authorized agent’s identity, or your authorized agent’s authority to make the request on your behalf, and/or if we cannot confirm that the collected Personal Information relates to you.
After receiving and verifying your request, we will provide the following information (depending on your request):
If we sold your Personal Information or disclosed it for a business purpose, we will provide:
See the “Methods for Submitting CCPA Requests to BodyWorkbyRafa” section below for information on how you can exercise your right to access collected Personal Information. For more information, see also the “Response Timing and Format” section below.
The right to request deletion of Personal Information
With certain exceptions, you have the right to request that we and our Service Providers delete Personal Information we or our Service Provider collected or maintained. Once we receive and verify your request, we will delete and instruct any applicable Service Providers to delete your Personal Information from our records, unless an exception applies.
We and our Service Providers may deny all or part of a verified deletion request if we must maintain your Personal Information to:
See the “Methods for Submitting CCPA Requests to BodyWorkbyRafa” section below for information on how you can exercise your right to delete collected Personal Information.
The right to opt-out of the sale of Personal Information
You have the right to opt-out of the “sale” of your Personal Information to other businesses or third parties. The CCPA defines “sell,” “selling, “sale”, and “sold” to include selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means.
Once we receive an opt-out request, we will act upon the request as soon as commercially reasonable, but no later than fifteen (15) days from the date we receive the request. We will also notify all third parties to whom we have sold the Personal Information after receiving the request, but before we are able to comply with the request, that you have exercised your opt-out right and instruct them not to resell the Personal Information.
However, if we have a good-faith, reasonable, and documented belief that the request is fraudulent, we will deny the request and provide you with an explanation of our rationale.
You may elect to opt-in to the sale of Personal Information after opting-out. In the event that a transaction requires the sale of your Personal Information as a condition of completing the transaction, we will inform you of this and provide instructions on how you can opt-in.
See the “Do Not Sell My Personal Information” section below for more on how to opt-out of the sale of Personal Information.
The rights of California consumers who are less than 16 years of age
Under California law, consumers who are less than 16 years of age must provide affirmative authorization, or a parent or guardian of a consumer less than 13 must provide affirmative authorization, before a business may sell their Personal information. This is referred to as the “right to opt-in.”
BodyWorkbyRafa does not have actual knowledge that we sell the Personal Information of California consumers who are less than 16 years of age.
The right to be free from discrimination
You have the right to equal service, and we will not discriminate against you if you exercise your rights under the CCPA. However, under certain circumstances, we may offer you special discounts or other incentives for the right to continue to collect, use, or sell your Personal Information. In that event, we will notify you of the relevant program’s material terms and obtain your voluntary opt-in consent to the program.
We collect a variety of categories of Personal Information about California consumers, their household, and/or their devices, from both online and offline sources. We will not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing advance notice.
In particular, we may have collected the following types of Personal Information in the last twelve (12) months:
We may have obtained the Personal Information listed above from the following sources:
We may have collected, shared, and/or sold, the Personal Information described above for one or more of the following business or commercial purposes:
We may have shared or sold the following Personal Information to the specified categories of third parties in the in the last twelve (12) months:
We may have disclosed for a business purpose the following Personal Information to the specific categories of third parties in the preceding twelve (12) months:
You have the right to submit a verifiable request to us using the following methods:
See the “Do Not Sell My Personal Information” section below for more on how to submit a request to opt-out of the sale of Personal Information.
Once we receive a request to know or to delete, we must verify your identity before we can respond.
You may be required to provide the following information for verification purposes:
If you submit either a request to know specific pieces of Personal Information collected, or a request to delete sensitive, irreplaceable, or otherwise valuable Personal Information, you (or your authorized agent, if applicable) will be required to provide a signed declaration affirming your identity (or your authorized agent’s identity, if applicable). The declaration is included on the online CCPA Consumer Request to Know Form and online CCPA Consumer Request to Delete Form, which you can access via the Consumer Portal.
An authorized agent is either a natural person or a business entity registered with the California Secretary of State that a consumer has authorized to act on his or her behalf.
You may use an authorized agent to submit a request to know, to delete, or to opt-out. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the authorized agent provide either (1) a power of attorney or (2) proof of your written permission. In addition to proof of your written permission, we may require you to verify your own identity and directly confirm that you provided the agent permission to submit the request.
Acknowledgement of receipt of request
We will confirm receipt of a request from you within ten (10) days. This confirmation will provide information about how we will process the request, including a description of our verification process and an approximation of when we will send you a substantive response.
We will respond to a verifiable request to know or verifiable request to delete within forty-five (45) days. If we cannot respond in that time, we will notify you in writing that we need an additional forty-five (45) days and explain the reason for the needed additional time.
Any disclosures we provide will cover only the 12-month period preceding our receipt of your verifiable request. If we cannot comply with your request, we will explain why. If you have requested to know specific Personal Information we collected, we will provide that information to you via mail or e-mail.
We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why and provide you with a cost estimate before completing the request.
Acting upon opt-out requests
We will act upon an opt-out as soon as commercially reasonable, but no later than fifteen (15) days from the date we receive the request.
You have the right to direct us not to sell your Personal Information and you may exercise this right at any time. Once you opt-out, we will not sell your Personal Information unless you subsequently give us authorization to do so. We will not ask you to reauthorize such sales until twelve (12) months have passed since complying with your request to opt-out.
If you are a California consumer and wish to opt-out of the sale of your Personal Information, you may submit an opt-out request by clicking on the following link: Do Not Sell My Personal Information
Other methods of opt-out notification include:
At the end of each calendar year, starting in 2020, we will report regarding the number of requests to know, delete or opt-out that we received, complied with in whole or in part, or denied, and the median length of our response time.
Our Website is not intended for children under 13 years of age. No one under age 13 may provide any Personal Information on the Website. We do not knowingly collect Personal Information from children under 13. If you are under 13, do not use this Website, provide any information on this Website, register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at email@example.com.
California residents over 13 but under 16 years of age may have additional rights regarding the collection and sale of their Personal Information. Please see “The rights of California consumers who are less than 16 years of age” section above for more information.
Pure Massage Therapy cares about our clients and we are taking measures to ensure their safety. Please take into consideration your appointment may look different and we will follow all guidelines required by the State of California, the Santa Clara County Health Dept and the City of Campbell as well as some additional measures we believe to be necessary. Please read our new procedures carefully:
What steps are we taking to ensure your safety?