California Notice at Collection

Effective date: December 24, 2025

This California Notice at Collection supplements this Privacy Policy and applies to California residents in accordance with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Categories of Personal Information Collected

When you visit our website, we may collect the following categories of personal information, as defined under California law:

• Identifiers, such as IP address, online identifiers, and device identifiers
• Internet or other electronic network activity information, such as browsing behavior, pages visited, and interactions with content
• Commercial information, such as interactions with affiliate links and advertisements
• Geolocation data, such as approximate location derived from IP address

Purposes for Collection

We collect personal information for the following business and commercial purposes:

• To operate, maintain, and improve our website
• To analyze website usage and performance
• To support advertising and affiliate marketing
• To detect and prevent security incidents and fraud
• To comply with legal obligations

Sale or Sharing of Personal Information

We do not sell personal information for monetary consideration. However, we may share certain personal information, as defined under California law, when we use embedded third-party content (for example, analytics widgets delivered via an iFrame) that may automatically collect technical identifiers such as IP address and device or browser information when loaded. Under the CPRA, this may be considered “sharing” for cross-context behavioral advertising.

Affiliate links on this website operate on a click-through basis only and do not involve automatic data sharing when a page loads.

California residents have the right to opt out of the sale or sharing of their personal information at any time.

Do Not Sell or Share My Personal Information: https://branding-magazine.com/opt-out-preferences/

Global Privacy Control (GPC)

We recognize and honor Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal information, where required by law. If a GPC signal is detected, the opt-out preference will be applied automatically.

Retention

Personal information is retained only for as long as reasonably necessary to fulfill the purposes described above, unless a longer retention period is required or permitted by law.

More Information

Certain personal information may be collected for security and fraud-prevention purposes. This processing is exempt from consumer opt-out rights under the CCPA/CPRA when used solely for these purposes.

For additional details about our privacy practices and your rights under California law, please review the full Privacy Policy on this page.

Privacy policy

We respect your privacy and are committed to protecting it through our compliance with this privacy policy (“Policy”). This Policy describes the types of information we may collect from you or that you may provide (“Personal Information”) on the branding-magazine.com website (“Website” or “Service”) and any of its related products and services (collectively, “Services”), and our practices for collecting, using, maintaining, protecting, and disclosing that Personal Information. It also describes the choices available to you regarding our use of your Personal Information and how you can access and update it.

This Policy is intended for users located in the United States.

We do not actively target or market our Services to individuals located in the European Union. Our Website and Services are intended primarily for users located in the United States.

This Policy is a legally binding agreement between you (“User”, “you” or “your”) and Smokybrands Marketing Agency LLC (“Smokybrands Marketing Agency LLC”, “we”, “us” or “our”). If you are entering into this Policy on behalf of a business or other legal entity, you represent that you have the authority to bind such entity to this Policy, in which case the terms “User”, “you” or “your” shall refer to such entity. If you do not have such authority, or if you do not agree with the terms of this Policy, you must not accept this Policy and may not access and use the Website and Services. By accessing and using the Website and Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

Automatic collection of information

When you open the Website, our servers automatically record information that your browser sends. This data may include information such as your device’s IP address, browser type, and version, operating system type and version, language preferences or the webpage you were visiting before you came to the Website and Services, pages of the Website and Services that you visit, the time spent on those pages, information you search for on the Website, access times and dates, and other statistics.

Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding the usage and traffic of the Website and Services. This statistical information is not otherwise aggregated in such a way that would identify any particular User of the system.

Collection of personal information

You can access and use the Website and Services without telling us who you are or revealing any information by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the features offered on the Website, you may be asked to provide certain Personal Information (for example, your name and email address).

We receive and store any information you knowingly provide to us when you make a purchase, or fill any forms on the Website. When required, this information may include the following:

• Account details (such as user name, unique user ID, password, etc)
• Contact information (such as email address, phone number, etc)
• Basic personal information (such as name, country of residence, etc)

You can choose not to provide us with your Personal Information, but then you may not be able to take advantage of some of the features on the Website. Users who are uncertain about what information is mandatory are welcome to contact us.

Use and processing of collected information

We act as a business or controller (as defined under applicable U.S. state privacy laws) when we determine the purposes and means of processing Personal Information on the Website and Services. In some cases, we may process Personal Information on behalf of another party, in which case we will do so consistent with our obligations under applicable law and any relevant agreement.

In order to make the Website and Services available to you, or to meet a legal obligation, we may need to collect and use certain Personal Information. If you do not provide the information that we request, we may not be able to provide you with the requested products or services. Any of the information we collect from you may be used for the following purposes:

• Fulfill and manage orders
• Deliver products or services
• Improve products and services
• Send administrative information
• Send marketing and promotional communications
• Send product and service updates
• Respond to inquiries and offer support
• Request user feedback
• Improve user experience
• Respond to legal requests and prevent harm
• Run and operate the Website and Services

Payment processing

In case of Services requiring payment, you may need to provide your credit card details or other payment account information, which will be used solely for processing payments. We use third-party payment processors (“Payment Processors”) to assist us in processing your payment information securely.

Payment Processors adhere to the latest security standards as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. Sensitive and private data exchange happens over a SSL secured communication channel and is encrypted and protected with digital signatures, and the Website and Services are also in compliance with strict vulnerability standards in order to create as secure of an environment as possible for Users. We will share payment data with the Payment Processors only to the extent necessary for the purposes of processing your payments, refunding such payments, and dealing with complaints and queries related to such payments and refunds.

Please note that the Payment Processors may collect some Personal Information from you, which allows them to process your payments (e.g., your email address, address, credit card details, and bank account number) and handle all the steps in the payment process through their systems, including data collection and data processing. The Payment Processors’ use of your Personal Information is governed by their respective privacy policies. We suggest that you review their respective privacy policies.

Disclosure of information

Depending on the requested Services or as necessary to complete any transaction or provide any Service you have requested, we may share your information with our contracted companies, and service providers (collectively, “Service Providers”) we rely upon to assist in the operation of the Website and Services available to you and who agree to handle your information consistent with applicable law and this Policy. We will not share Personal Information with unaffiliated third parties except as described in this Policy.

In connection with the operation of the Website, we may disclose Personal Information to certain categories of third parties, including:

• Analytics providers (such as Matomo) for Website performance and usage analysis
• Embedded third-party content providers (for example, analytics widgets delivered via an iFrame)
• Affiliate networks and advertising partners primarily through click-through links
• Social media platforms when you interact with social media features on the Website
• Payment processors and technical service providers that support Website functionality

Such disclosures may involve the transfer of technical identifiers such as IP address, device identifiers, browser information, and interaction data, depending on your interactions with the Website.

Service Providers are not authorized to use or disclose your information except as necessary to perform services on our behalf or comply with legal requirements.

We may also disclose any Personal Information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

In the event we go through a business transition, such as a merger or acquisition by another company, or sale of all or a portion of its assets, your Personal Information will likely be among the assets transferred.

Retention of information

We will retain and use your Personal Information for the period necessary to comply with our legal obligations, to enforce our Policy, resolve disputes, and unless a longer retention period is required or permitted by law.

We may use aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a manner that would identify you personally.

Transfer of information

We are based in the United States and process information in the United States and other locations where our service providers operate. If you access the Website from outside the United States, you understand that your information may be transferred to and processed in the United States and other jurisdictions which may have different data protection laws than your jurisdiction.

U.S. Privacy Notice

This section provides additional disclosures for residents of certain U.S. states, including California, Colorado, Connecticut, Delaware, Iowa, Maryland, Utah, and Virginia. Depending on where you live and subject to applicable law, you may have the rights described below.

For purposes of California law, “sale” does not necessarily mean an exchange of money. Sharing Personal Information for cross-context behavioral advertising may be considered “sharing” under the CPRA.

For clarity, we do not sell Personal Information in the traditional sense of exchanging data for money. However, certain disclosures to third-party providers through embedded widgets or similar technologies may be considered “sharing” under the CPRA.

Categories of Personal Information (last 12 months). Depending on how you interact with the Website and Services, we may collect identifiers (such as IP address and online identifiers), internet or other electronic network activity information (such as pages viewed and interactions), commercial information (such as purchase records), and inferences drawn from this information to improve our services.

Sources. We collect Personal Information directly from you (for example, when you subscribe or contact us) and automatically from your device/browser when you use the Website (for example, via server logs, analytics, and embedded third-party content where used).

Purposes. We collect and use Personal Information to operate the Website, provide services, process transactions, perform analytics, display advertising and affiliate promotions, communicate with you, and comply with legal obligations.

Your rights (U.S. residents)

Depending on your state of residence, you may have the right to:

• Know / Access the Personal Information we collected about you and obtain certain details about our processing
• Delete Personal Information, subject to legal exceptions
• Correct inaccurate Personal Information
• Opt out of the sale and/or sharing of Personal Information and certain targeted advertising
• Limit the use of sensitive Personal Information, where applicable
• Data portability, where technically feasible
• Non-discrimination for exercising your rights

Authorized agents. Where permitted by law, you may use an authorized agent to submit a request on your behalf. We may require proof of authorization and verification of your identity.

How to exercise your rights

Any requests to exercise your rights can be directed to us through the contact details provided in this document. Please note that we may ask you to verify your identity before responding to such requests.

Cookies

We may use cookies and similar technologies that are necessary to operate, secure, and maintain the Website and Services. We also use analytics in a configuration intended to reduce reliance on cookies where feasible. You can modify your browser settings to decline cookies if you prefer, but some features may not function properly.

Data analytics

We use Matomo, a web analytics platform, to analyze traffic and usage patterns on our Website. We configure Matomo to minimize reliance on cookies (for example, by using cookieless measurement where feasible) and to apply IP anonymization. Matomo data is used solely for analytics and Website performance purposes.

Privacy of children

Our Website and Services are not directed to children under the age of 13 and are intended for a general adult audience. In accordance with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect Personal Information from children under the age of 13.

If we become aware that we have inadvertently collected Personal Information from a child under the age of 13 without verified parental consent, we will take reasonable steps to promptly delete such information.

We do not intentionally market our Services to individuals under the age of 18.

Do not sell or share my personal information

You have the right to opt out of the sale and/or sharing of your Personal Information. Upon receiving and verifying your request, we will cease the sale and/or sharing of your Personal Information, as applicable.

Note that opting out may limit certain embedded third-party features (for example, iFrame-based widgets).

Do Not Sell or Share My Personal Information

Do Not Track signals

Some browsers incorporate a Do Not Track feature that signals to websites you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. As a result, the Website and Services are not yet set up to interpret or respond to Do Not Track signals communicated by your browser.

We also recognize and honor Global Privacy Control (GPC) signals as required by applicable California privacy laws. Where a valid GPC signal is detected, it will be treated as a request to opt out of the sale or sharing of Personal Information for the associated browser or device.

Advertisements

We may display advertising and affiliate-related content on the Website.

Click-through affiliate links. Many affiliate promotions are provided as standard links. If you click an affiliate link, you may be redirected to a third-party website that may use its own cookies or tracking technologies to attribute a purchase for commission purposes. These technologies are controlled by the destination website.

Embedded third-party content (iFrames or widgets). In some instances, we embed third-party content (for example, an analytics widget delivered via an iFrame). When such embedded content loads, the third party may automatically receive technical information such as IP address, device identifiers, and browser information. Under applicable U.S. state privacy laws, including the CPRA, this may be considered “sharing” of personal information for cross-context behavioral advertising, even if no monetary payment is exchanged.

Social media features

Our Website and Services may include social media features (for example, Facebook or X/Twitter buttons). These features may collect your IP address and may set a cookie to enable the feature to function properly. Your interactions with these features are governed by the privacy policy of the respective provider.

Email marketing

We offer electronic newsletters to which you may voluntarily subscribe at any time. In compliance with the CAN-SPAM Act, all marketing emails sent from us will clearly state who the email is from and provide clear information on how to contact the sender. You may unsubscribe at any time using the unsubscribe instructions included in the emails. However, you will continue to receive essential transactional emails.

Affiliate links

We may engage in affiliate marketing and include affiliate links on the Website and Services. Affiliate links on this website operate primarily on a click-through basis. If you click an affiliate link, you may be redirected to a third-party website that may place a cookie or use similar technologies to track sales for purposes of commissions.

We do not automatically load affiliate tracking pixels, scripts, or affiliate iFrames as part of our standard affiliate link placements.

Links to other resources

The Website and Services contain links to other resources that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other resources or third parties. We encourage you to read the privacy statements of each resource that may collect Personal Information.

Information security

We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, use, modification, and disclosure. However, no method of transmission over the Internet or method of electronic storage is completely secure.

Security & Abuse Prevention

We use security software to protect our website, systems, and users from malicious activity, unauthorized access attempts, fraud, and abuse.

In connection with these security measures, we may collect and process technical information such as IP addresses, request headers, timestamps, and attempted actions. This information is processed solely for security, integrity, and operational purposes, including detecting, preventing, and responding to security incidents.

The collection and use of this information constitutes a legitimate business purpose under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including purposes related to security, fraud prevention, and system integrity.

This data is not sold or shared as defined under the CCPA/CPRA, and it is not used for advertising, marketing, profiling, or cross-context behavioral tracking. Security-related data is retained only for as long as reasonably necessary to fulfill these purposes and is automatically deleted after a limited retention period.

Data breach

In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe that there is a reasonable risk of harm or if notice is otherwise required by law. We may also report the breach to relevant authorities where required.

Changes and amendments

We reserve the right to modify this Policy at any time. When we do, we will revise the updated date at the bottom of this page. Your continued use of the Website and Services after the effective date of the revised Policy will constitute acceptance of the changes.

Acceptance of this policy

You acknowledge that you have read this Policy and agree to all its terms and conditions. By accessing and using the Website and Services and submitting your information you agree to be bound by this Policy. If you do not agree to abide by the terms of this Policy, you are not authorized to access or use the Website and Services.

Contacting us

If you have questions or wish to exercise your rights, you may contact us at:

hello@branding-magazine.com
https://branding-magazine.com/contact/

This document was last updated on December 24, 2025.