Last updated: July 20, 2026
This California Privacy Notice supplements our Privacy Policy and applies to California residents. It describes our practices under the California Consumer Privacy Act, as amended (the "CCPA"). Terms defined by the CCPA have the same meaning in this Notice.
Personal Information We Collect, Use, and Disclose
The categories below describe personal information we may collect, the business or commercial purposes for which we use it, and the categories of recipients to which we disclose it for those purposes. The information collected depends on how you interact with us.
| CCPA category and examples | Purposes | Recipients for business purposes |
|---|---|---|
|
Identifiers Name, company, postal address, email address, phone number, account identifier, IP address, and necessary cookie or device identifiers. |
Store and account operation; order, quote, and support fulfillment; communications; security; fraud prevention; legal compliance; Shopify enhanced services; and, after consent, limited analytics. | Shopify, including through Shopify Network Intelligence; payment, fraud-prevention, communications, customer-support, hosting, fulfillment, and shipping providers; professional advisers; and Google Analytics only after analytics consent. |
|
Customer records information Name, contact information, billing and shipping address, and payment or transaction information. |
Process payments and orders; provide quotes and support; ship products; handle returns; prevent fraud; and maintain tax, warranty, and business records. | Shopify; payment processors; fraud-prevention providers; fulfillment and shipping providers; customer-support providers; and professional advisers. |
|
Commercial information Products viewed or ordered, cart contents, quote details, purchase history, returns, and transaction records. |
Provide requested products and services; manage orders, returns, and support; maintain records; and improve store content and navigation. | Shopify, including through Shopify Network Intelligence, and operational providers supporting payments, fulfillment, shipping, customer service, accounting, and fraud prevention. |
|
Internet or other electronic activity Necessary storefront, cart, checkout, account, security, and fraud-prevention activity. After analytics consent, our only custom Analytics event is location_link_click, containing target_type (state or city) and a controlled target_slug. Google Analytics also adds standard event and session metadata and may generate automatic events such as session_start, first_visit, and user_engagement. Analytics data may include a sanitized page origin and path, browser language, basic device category, and pseudonymous client and session identifiers. |
Operate and secure the Services; prevent fraud; provide Shopify enhanced services; and, after consent, count state- and city-related link selections and improve navigation and content. | Shopify, including through Shopify Network Intelligence, and security or operational providers; Google Analytics only after analytics consent. |
|
Approximate geolocation General location associated with an IP address or shipping information. After analytics consent, Google Analytics may log country and region derived from the IP address. Granular Analytics location reporting is disabled, so city, latitude, and longitude are not logged. We do not collect precise GPS location for analytics. Google states that it discards the IP address before logging. |
Store operation, shipping, security, fraud prevention, compliance, and Shopify enhanced services. | Shopify, including through Shopify Network Intelligence, and shipping, security, and fraud-prevention providers; Google Analytics only after analytics consent for country and region reporting. |
|
Sensitive personal information Account credentials and payment information processed by Shopify or a payment provider. |
Authenticate accounts, process payments, provide requested Services, prevent fraud, and comply with law. | Shopify, payment processors, and fraud-prevention providers. We do not use or disclose sensitive personal information for purposes that require a right to limit under the CCPA. |
Optional Google Analytics does not receive an automatic page_view event from this site. Enhanced Measurement is disabled. Granular location and device reporting is also disabled, which prevents Analytics reporting of inferred city, latitude, longitude, and granular device fields; country, region, browser language, and basic device category may still be logged. Google uses the IP address at collection to derive available geographic information and states that it discards the IP address before logging. We do not send names, email addresses, phone numbers, mailing addresses, account credentials, order numbers, payment information, form contents, typed search text, or full URLs containing query parameters to Google Analytics. Email addresses and configured URL parameters are redacted as an additional safeguard. Analytics cookies expire no later than 30 days after they are set or refreshed, and Google advertising consent signals remain denied.
Sources of Personal Information
We collect personal information directly from you; automatically through the necessary operation and security features of the Services; from Shopify, including through Shopify Network Intelligence, and service providers supporting payments, shipping, fraud prevention, hosting, communications, and customer support; and, only after analytics consent, through Google Analytics 4.
Sale, Sharing, Targeted Advertising, and Shopify Network Intelligence
We do not sell personal information for monetary consideration, display third-party or behaviorally targeted advertisements, operate advertising campaigns, or use Google Analytics for advertising.
Shopify Network Intelligence is enabled for this store. This feature may combine identifiers, commercial information, internet or electronic activity, approximate location, and related inferences from interactions with our store, Shopify, and other merchants to provide enhanced Shopify services, personalization, measurement, security, and business insights. We are responsible for our decision to enable and use the feature and for our related privacy obligations. Shopify determines and performs aspects of the cross-merchant processing under its own privacy terms; depending on the information and processing involved, a privacy request may need to be handled by us, Shopify, or both. Depending on the circumstances and where you live, this processing may be treated as a "sale," "sharing," or targeted advertising under the CCPA or other privacy laws even though we do not receive money for personal information or operate advertising campaigns. During the 12 months preceding this Notice, these categories may have been disclosed to Shopify in connection with Network Intelligence.
You may opt out of Network Intelligence processing that applicable law treats as sale, sharing, or targeted advertising through Your Privacy Choices or a recognized Global Privacy Control signal. We do not knowingly sell or share the personal information of anyone under 16. We also disclose the categories described above to service providers for the business purposes stated in this Notice; disclosures to service providers operating under applicable contractual restrictions are not treated as sale or sharing under the CCPA.
Analytics and Privacy Choices
Google Analytics 4 is optional. It does not load unless you choose Allow analytics. You can reject or withdraw analytics permission at any time through Cookie Preferences. We keep Google advertising storage, advertising-user-data, and advertising-personalization consent signals denied. Google Signals, advertising personalization, remarketing, Google Ads and AdSense links, Enhanced Measurement, and granular location and device reporting are disabled.
We recognize Global Privacy Control signals where required by law, including as an opt-out of Shopify Network Intelligence processing that applicable law treats as sale, sharing, or targeted advertising. Optional Google Analytics remains controlled separately by the analytics choice described above.
Your California Privacy Rights
Subject to applicable law and verification, California residents may have the right to:
- know the categories and specific pieces of personal information we collected about them;
- request deletion of personal information;
- request correction of inaccurate personal information;
- receive information about the categories of sources, purposes, and recipients associated with personal information;
- opt out of sale or sharing, if a business engages in those practices;
- limit certain uses or disclosures of sensitive personal information, if a business engages in uses that trigger that right; and
- receive equal service and pricing without unlawful discrimination for exercising a CCPA right.
To submit a request, email sales@unlimitedlights.com, call 1-888-959-1965, or use the methods available through our Your Privacy Choices page. You may use an authorized agent where permitted by law. We may request information reasonably necessary to verify identity, residency, and the agent's authority.
Retention
We retain each category of personal information only as long as reasonably necessary for the purpose for which it was collected, including to provide the Services, complete transactions, fulfill orders, support customers, maintain tax and business records, prevent fraud, comply with law, resolve disputes, and enforce agreements. Optional analytics cookies expire no later than 30 days after they are set or refreshed. Google Analytics event and user data is configured for two-month retention, with retention not reset by new activity. Aggregate or de-identified reports may be retained longer.
Contact Us
Unlimited Lights LLC
8400 Normandale Lake Blvd, Suite 920
Bloomington, MN 55437
United States
Email: sales@unlimitedlights.com
Phone: 1-888-959-1965
