CBD PILLOW CALIFORNIA PRIVACY NOTICE
Effective Date: September 6, 2026
Last Updated: September 6, 2026
This California Privacy Notice ("California Notice") supplements the CBD Pillow Privacy Policy for California residents and applies to the extent the California Consumer Privacy Act, as amended ("CCPA"), applies to Plush Living LLC d/b/a CBD Pillow ("CBD Pillow," "we," "us," or "our").
This California Notice and the CBD Pillow Privacy Policy should be read together. Terms defined by the CCPA have the same meanings when used in this Notice.
1. PERSONAL INFORMATION COLLECTED AND DISCLOSED
During the preceding 12 months, CBD Pillow may have collected and processed the following categories of Personal Information. Whether a category applies to you depends on how you interact with us.
| CCPA Category | Examples | Collected | Sold or Shared |
|---|---|---|---|
| Identifiers | Name, postal address, email address, telephone number, IP address, customer identifiers, device IDs, cookie IDs, advertising identifiers | Yes | Certain identifiers may be sold or shared as defined by California law |
| Customer records information | Contact, account, transaction, billing, and payment-related information | Yes | Certain elements may overlap with identifiers or commercial information; full payment-card credentials are not sold or shared for advertising |
| Commercial information | CBD Pillow products viewed, considered, or purchased; cart activity; order history; product interests; returns; warranties; replacement-cover purchases; and related commercial activity | Yes | Yes |
| Internet or other electronic network activity | Browsing activity, pages viewed, CBD-related content viewed, clicks, searches, device/browser activity, interactions with Services and advertisements | Yes | Yes |
| Approximate geolocation | General location inferred from IP address or similar information | Yes | Certain information may be shared |
| Audio, electronic, visual, or similar information | Customer-service call recordings, chat or other recorded communications where applicable; review photos or other user-submitted content | Limited | No intentional sale or sharing for targeted advertising |
| Inferences | Product interests, likely preferences, customer segments, advertising audiences, or other inferences; where an inference concerns health status or health-related CBD use, it may also be regulated as Consumer Health Data | Yes | Yes, where used for applicable advertising activities |
| Professional or employment-related information | Company, role, creator or influencer profile information, business information, social-media or channel information, and similar information submitted for retailer, affiliate, influencer, creator, wholesale, or partnership programs | Limited | No intentional sale or sharing for targeted advertising |
| Sensitive personal information | Account credentials; certain financial/payment information; health-related information voluntarily provided; and, depending on context and applicable law, certain information revealing or inferring health status or intended health-related CBD use | Limited | No intentional sale or sharing of health-related Sensitive Personal Information for targeted advertising |
CBD Pillow does not intentionally collect biometric information used to uniquely identify consumers or non-public educational records through its ordinary consumer Services.
2. SOURCES AND PURPOSES
We may collect Personal Information directly from you; automatically from your browser or device; from service providers and contractors; advertising, analytics, attribution, affiliate, review, and social-media partners; payment providers; delivery and fulfillment providers; retailers or marketplaces where applicable; other persons acting at your direction; and other lawful sources.
We use Personal Information for the purposes described in the CBD Pillow Privacy Policy, including providing products and services; processing transactions; arranging shipping and delivery; customer service; returns and warranties; responding to product questions; website operation and improvement; analytics and measurement; advertising and attribution where permitted; communications; security and fraud prevention; legal compliance; and protection of legal rights. Consumer Health Data is additionally governed by our Consumer Health Data Privacy Policy.
3. SALE AND SHARING DURING THE PRECEDING 12 MONTHS
CBD Pillow does not sell Personal Information to third parties in exchange for money.
However, during the preceding 12 months, certain disclosures involving advertising, analytics, attribution, social-media, or similar technologies may have constituted a "sale" or "sharing" under California law.
Categories potentially sold or shared include identifiers; commercial information; Internet or other electronic network activity; approximate geolocation information; and inferences, subject to applicable privacy choices and law. CBD Pillow does not intentionally sell or share Consumer Health Data or health-related Sensitive Personal Information for targeted advertising in circumstances prohibited by law or requiring authorization that has not been obtained.
Categories of third parties may include advertising platforms and networks, social-media platforms, advertising-measurement providers, attribution providers, analytics providers, and other providers involved in applicable advertising or measurement activities.
The business or commercial purposes include measuring advertising performance; attributing purchases or other activity to advertising; creating or using advertising audiences; understanding advertising effectiveness; delivering or supporting relevant advertising; and related measurement and marketing purposes.
4. DISCLOSURES FOR BUSINESS PURPOSES
During the preceding 12 months, CBD Pillow may have disclosed categories of Personal Information to service providers and contractors for business purposes.
Depending on the relationship, such disclosures may include identifiers, customer-record information, commercial and transaction information, Internet or electronic activity, approximate location, communications, limited sensitive personal information, and inferences.
Business purposes may include ecommerce infrastructure, payment processing, fulfillment, shipping and delivery, customer service, communications, email and SMS services, analytics, website functionality and optimization, fraud prevention, cybersecurity, AI-enabled services, return and warranty administration, product support, professional services, and legal compliance.
5. RETENTION
CBD Pillow retains Personal Information for no longer than reasonably necessary and proportionate for the purposes for which it was collected or processed, subject to applicable legal, regulatory, contractual, security, fraud-prevention, accounting, tax, warranty, dispute-resolution, and litigation requirements.
Category-specific retention criteria are described in Section 10 of the CBD Pillow Privacy Policy.
6. SENSITIVE PERSONAL INFORMATION
CBD Pillow may process limited categories of Sensitive Personal Information, including information necessary to access an account, certain payment or financial information, and health-related information a consumer voluntarily provides. Depending on context and applicable law, information indicating an intended health-related use of a CBD product or permitting an inference concerning health status may also receive heightened protection.
CBD Pillow does not use or disclose Sensitive Personal Information for purposes intended to trigger the CCPA right to limit its use or disclosure.
We use and disclose Sensitive Personal Information only as reasonably necessary and proportionate for legally permitted purposes such as providing requested products or services, processing transactions, maintaining accounts, maintaining security, preventing fraud, customer service, legal compliance, and establishing, exercising, or defending legal rights.
We do not intentionally use health-related Sensitive Personal Information or Consumer Health Data to create third-party targeted-advertising profiles based upon a consumer's medical condition, symptom, treatment, CBD dosage or tolerance, intended health-related use, or other sensitive health characteristic.
If our practices change in a manner that creates a California right to limit the use or disclosure of Sensitive Personal Information, we will provide the notice and mechanism required by applicable law.
7. CALIFORNIA PRIVACY RIGHTS
California residents may have rights under the CCPA to:
- know the categories and specific pieces of Personal Information CBD Pillow has collected;
- know the categories of sources from which Personal Information was collected;
- know our business or commercial purposes for collecting, selling, or sharing Personal Information;
- know the categories of third parties to whom Personal Information is disclosed, sold, or shared;
- delete Personal Information, subject to statutory exceptions;
- correct inaccurate Personal Information;
- opt out of sale or sharing;
- where applicable, limit certain uses or disclosures of Sensitive Personal Information;
- where applicable, exercise rights relating to covered automated decisionmaking technology; and
- receive freedom from unlawful discriminatory or retaliatory treatment for exercising CCPA rights.
8. HOW TO EXERCISE CALIFORNIA RIGHTS
Sale/Sharing Opt-Out: Use the "Your Privacy Choices," "Do Not Sell or Share My Personal Information," or similar privacy-control mechanism available on www.cbdpillow.com.
Other California Privacy Requests:
Email: support@cbdpillow.com
Telephone: 1-888-362-6745
Mail:
Plush Living LLC d/b/a CBD Pillow
3233 Mission Oaks Blvd., Ste. C
Camarillo, CA 93012
United States
Please identify your communication as a California Privacy Request and specify the right you wish to exercise.
For access, deletion, correction, or similar requests, we may take reasonable steps to verify your identity in accordance with applicable law.
Where California law permits an authorized agent to act on your behalf, we may request reasonable proof of the agent's authority and take steps permitted by law to verify the request.
9. GLOBAL PRIVACY CONTROL AND OPT-OUT PREFERENCE SIGNALS
Where required by California law, CBD Pillow recognizes qualifying browser- or device-based opt-out preference signals, including qualifying Global Privacy Control ("GPC") signals.
A qualifying signal is treated as an applicable request to opt out of sale or sharing for the browser, device, and associated pseudonymous profile through which the signal is received, and more broadly where required by law and technically applicable.
CBD Pillow does not require a consumer to create an account or provide additional identifying information solely for us to process an applicable browser- or device-level opt-out preference signal.
Certain processing that does not constitute sale or sharing may continue after a GPC or other opt-out request, including processing reasonably necessary for website functionality, transactions, security, fraud prevention, privacy-preference management, and legally permitted analytics or measurement.
10. DO NOT TRACK
Some browsers historically offered a "Do Not Track" ("DNT") setting intended to communicate a user preference regarding online tracking.
Because traditional DNT signals have not developed into a uniform legally recognized technical standard governing website responses, CBD Pillow does not necessarily respond to traditional DNT signals merely because a browser transmits one.
This is different from legally recognized opt-out preference signals such as GPC, which CBD Pillow processes where required by applicable law.
Third-party advertising, analytics, attribution, or similar technologies may collect information concerning interactions with our Services over time and across websites or services where permitted by applicable law and applicable privacy choices.
11. CHILDREN AND CONSUMERS UNDER 16
CBD Pillow does not have actual knowledge that it sells or shares the Personal Information of consumers under 16 years of age. The Services are intended for adults and are not directed to children.
Where the CCPA applies, CBD Pillow does not knowingly sell or share the Personal Information of consumers under 16 without the affirmative authorization required by California law.
Our broader practices concerning children and teens are described in the CBD Pillow Privacy Policy.
12. FINANCIAL INCENTIVES
CBD Pillow may from time to time offer discounts, promotions, sweepstakes, loyalty benefits, email or SMS enrollment offers, or similar programs that may involve Personal Information.
Not every discount or promotion constitutes a "financial incentive" or "price or service difference" regulated by the CCPA.
If CBD Pillow offers a program subject to CCPA financial-incentive requirements, we will provide a separate Notice of Financial Incentive at or before enrollment containing the information required by law. Participation will be voluntary.
13. CALIFORNIA SHINE THE LIGHT
California Civil Code Section 1798.83 may permit California residents to request certain information concerning disclosures of specified categories of Personal Information to third parties for those third parties' own direct-marketing purposes.
To submit an applicable request, email support@cbdpillow.com with the
subject line California Shine the Light Request, or write to:
Plush Living LLC d/b/a CBD Pillow
3233 Mission Oaks Blvd., Ste. C
Camarillo, CA 93012
United States
14. NON-DISCRIMINATION
CBD Pillow will not unlawfully discriminate against a California consumer because the consumer exercised a privacy right. This does not prevent lawful promotions, discounts, loyalty programs, or other practices permitted by applicable law.
15. CONTACT US
Questions concerning California privacy practices or rights may be directed to:
Plush Living LLC d/b/a CBD Pillow
3233 Mission Oaks Blvd., Ste. C
Camarillo, CA 93012
United States
Email: support@cbdpillow.com
Telephone: 1-888-362-6745