How CartStack Handles the California Consumer Privacy Act (CCPA)

What is the CCPA?

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), is a state statute intended to enhance privacy rights and consumer protection for residents of California, United States. The intentions of the Act are to provide California residents with the right to:

  • Know what personal data is being collected about them
  • Know whether their personal data is sold or shared or disclosed, and to whom
  • Say no to the sale or sharing of personal data (including for targeted advertising)
  • Access their personal data
  • Request deletion of personal information collected from them
  • Not be discriminated against for exercising their privacy rights

Who does the CCPA affect?

The CCPA applies to certain businesses, including any for-profit entity that collects consumers' personal data, does business in California, and satisfies at least one of the following thresholds:

  • Has annual gross revenues in excess of $25 million;
  • Buys, receives, sells, or shares the personal information of 50,000 or more consumers or households; or
  • Earns more than half of its annual revenue from selling consumers' personal information

How is CartStack handling the CCPA?

CartStack is designed to support compliance with applicable privacy laws, including the CCPA/CPRA, when implemented and used appropriately by our customers.

CartStack processes Customer Data such as email addresses, online identifiers (such as cookies or device information), and transactional/logging information in order to provide abandonment recovery and related services.

CartStack does not sell personal information for monetary consideration.

CartStack may disclose personal information to service providers and vendors (such as hosting, analytics, communications providers, and identity resolution partners where enabled) solely for the purpose of providing the Service on behalf of our customers and subject to contractual restrictions.

At any point, our clients or their end users may contact us at support@cartstack.com for assistance with accessing or requesting removal of personal information, subject to applicable law and verification requirements.

How does the CCPA affect my campaign?

All CartStack campaigns include unsubscribe links at the bottom of every email that gets sent.

If any consumer requests access to or removal of their data from our systems, they (or the merchant they interacted with) may reach out to us at support@cartstack.com.

In most cases, CartStack acts as a service provider/processor on behalf of the merchant, and the merchant is responsible for providing required notices and responding to privacy rights requests from its end users. CartStack will provide reasonable assistance as required.

Optional Feature Notice: Reveal

Certain features of the Service are optional and only apply if enabled by a customer.

If a customer enables CartStack’s Reveal feature, CartStack may process online identifiers and event data and may work with third-party service providers or data partners to attempt to associate visitors with contact information (such as an email address) in order to return matched results to the customer for abandonment recovery and analytics purposes.

Customers that do not enable Reveal do not use this feature.

Customers are responsible for providing appropriate disclosures, cookie notices, and opt-out mechanisms where required by law.

Does CartStack sell my customer's data?

No. CartStack does not sell personal information for monetary consideration.

The information processed through CartStack may include identifiers such as email address, cookie/device information, and transactional or logging details.

CartStack may disclose personal information to service providers and partners solely to perform services on behalf of customers, including identity resolution where enabled.

CartStack does not permit service providers to use Customer Data for their own independent purposes.

Opt-Out Rights (“Do Not Sell or Share”)

Under the CPRA, California residents may have the right to opt out of the sale or sharing of personal information, including sharing for targeted advertising.

CartStack supports opt-out rights where required, and customers using the Service are responsible for providing appropriate opt-out mechanisms on their own websites, including cookie consent tools and “Do Not Sell or Share” links where applicable.

Consumers may also opt out of certain interest-based advertising through industry opt-out tools such as:

For assistance with opt-out requests or privacy rights requests, contact support@cartstack.com.

For additional information, please review our Privacy Policy.