CCPA & CPRA

You don't have to be in California

The California Consumer Privacy Act, strengthened by the California Privacy Rights Act, gives California residents specific rights over their personal information — including the right to know what's collected, request deletion, and opt out of certain data sharing and sales.

Applicability depends on the business and its circumstances. These laws generally apply to businesses meeting certain thresholds around revenue, data volume, or data sales — not to every small business with a website. But businesses well beyond California's borders sometimes discover the rules reach further than they expected.

Website areas these laws touch

• Online identifiers — IP addresses, device IDs, cookies
• Tracking & advertising — pixels and tags that may count as "sharing" personal information
• Forms — what you collect, why, and what happens to it
• Third-party services — embedded tools that process visitor data
• Privacy requests — mechanisms for consumers to exercise their rights
• Privacy notices — disclosures at or before the point of collection

The practical side

If these laws apply to you, your website needs the technical machinery to back up your obligations: accurate notices, working opt-out mechanisms, honored preference signals, and data practices you can actually describe.

We build and configure that machinery. Whether you need it — that's a question for your legal counsel, and we'll never pretend otherwise.