Privacy Policy

Exercising Your CCPA/CPRA Data Protection Rights

In order to exercise any of Your rights under the CCPA and CPRA, and if You are a California resident, You can contact Us:

• By visiting this page on our website: https://www.framersworkshop.com/contact

• By email: framers@framersworkshop.com

• By phoning our attorney, Ian Goldberg: (415)-341-2888

Only You, or a person registered with the California Secretary of State that You authorize to act on Your behalf, may make a verifiable request related to Your personal information.

Your request to Us must:
 

• Provide sufficient information that allows Us to reasonably verify You are the person about whom We collected personal information or an authorized representative

• Describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it. 

We cannot respond to Your request or provide You with the required information if We cannot:

• Verify Your identity or authority to make the request and confirm that the personal information relates to You.

We will disclose and deliver the required information free of charge within 45 days of receiving Your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonable necessary and with prior notice.

Any disclosures We provide will only cover the 12-month period preceding the verifiable request’s receipt.

For data portability requests, We will select a format to provide Your personal information that is readily useable and should allow You to transmit the information from one entity to another entity without hindrance.

(1) Request Submission. To exercise your California privacy rights, you need to submit a verifiable consumer request to know, request to delete, or request to correct to us by sending us a message to our customer service at: framers@framersworkshop.com. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

(2) Response Process. Upon receiving a request to know, request to delete, or request to correct, we will confirm receipt of the request within [ten (10)] business days and provide information about how we will process your request. The information provided will describe our verification process and when you should expect a response from us. In general, we will respond to the request within forty-five (45) calendar days from the of receipt; but, if necessary, we may take up to an additional forty-five (45) calendar days to respond to your request. If an extension is needed, we will notify you of the extension and explain the reasons that responding to your request will take more than forty-five (45) calendar days.

(3) Response Timing and Format. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically by electronic mail communication.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

(4) Delivery. Except as otherwise provided by applicable law, the information will be provided in writing or through our website. We will respond by mail. If we do not take action on your request, we will, without delay and, at the latest, within the time period permitted for our response, inform you of the reasons that we did not take action and any rights you may have to appeal the decision.

We are committed to responding to your requests to exercise Consumer rights in accordance with applicable law and the California Privacy Laws. However, your rights are subject to certain limitations:

• We will respond to requests to know by the same user no more than twice in a twelve (12) month period.

• A response to a Request to Know may be limited to the 12-month period preceding receipt of the request if it would be impossible, involve disproportionate effort, or the request is for data for a specific time period.

• In response to a Right to Know request, we are prohibited from disclosing social security numbers, driver’s license numbers, other government-issued identification numbers, financial account numbers, health insurance numbers, medical identification numbers, account passwords, security questions and answers, or unique biometric data generated from measurements or technical analysis of human characteristics. However, we will inform you whether we have collected that type of information.

• Other limitations to Consumer rights under the California Privacy Laws may apply. For example, we will not able to comply with your request to delete your personal information if it is necessary for certain legitimate business purposes or exercising legal obligations.

​

We are not required to delete your personal information if it is reasonably necessary for us, our service providers, or our contractors to maintain the personal information in order to:

• Complete the transaction for which the personal information was collected, provide a service that you requested, take actions reasonably anticipated by the you within the context of our ongoing business relationship with you, or otherwise perform a contract with you.

• Help ensure the security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for those purposes.

•  Debug to identify and repair errors that impair existing intended functionality.

• Exercise free speech, ensure the right of another consumer to exercise that consumer’s right of free speech, or exercise another right provided for by law.

• Comply with the California Electronic Communications Privacy Act (Ca. Penal Code § 1546 et. seq.).

• Engage in public or peer-reviewed scientific, historical, or statistical research that conforms or adheres to all other applicable ethics and privacy laws, when the business’ deletion of the information is likely to render impossible or seriously impair the ability to complete such research, if you have provided informed consent.

• To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business and compatible with the context in which the consumer provided the information.

• Comply with a legal obligation.

​

If we deny a verified request to exercise Consumer’ right under the California Privacy Laws, in whole or in part, because of a conflict with federal or state law, or an exception under applicable law, we will inform the requestor and explain the basis for the denial. We will take action, in accordance with your request and California Privacy Laws, for those categories of personal information not subject to those exceptions.

(5) Verification procedure. We are required by the CPRA to verify the identity of individuals who submit a request to know, request to delete, or request to correct. In accordance with our internal policies and in compliance with the California Privacy Laws, we will take steps to verify your identity before granting you access to such Personal Information or acting on your request to exercise your rights, as outlined below:

To determine whether the individual making the request is the consumer about whom we collected information, we will verify your identity by matching the identifying information provided by you in the request to the personal information that we already maintain about you. As part of this process, you will be asked to provide your full name, address, and phone number. We will inform you if we cannot verify your identity.

• If we cannot verify the identity of the person making the request for specific pieces of information, we are prohibited from disclosing any specific pieces of personal information to the requestor. However, if denied in whole or in part for this reason, we will evaluate the request as if it is seeking the disclosure of categories of personal information about the consumer.

• If there is no reasonable method by which we can verify the identity of the requestor to the degree of certainty required, we will state this in our response an explain why we have no reasonable method by which we can verify the identity of the requestor.

• If we cannot verify your identity based on the information already maintained, we may request additional information from you. We will try to limit the information collected, and we will only use this information to verify your identity and for security or fraud-prevention purposes. Except as required by law, we will delete any new personal information collected for the purposes of verification as soon as practical after processing the request.

(6) Authorized Agents. You may designate an authorized agent to make requests on your behalf by sending us written authorization in writing to:

​

ATTENTION MANAGEMENT

THE FRAMER'S WORKSHOP

2439 CHANNING WAY

BERKELEY CA 94704-2209

If you use an authorized agent to submit a request to know or a request to delete, we may require you to:

​

(a) provide the authorized agent with written permission to do so; and

(b) verify your identity directly with us. However, we will not require these actions if you have provided the authorized agent with power of attorney pursuant to the California Probate Code. We may deny a request from the agent that does not submit proof that they have been authorized by the consumer to act on their behalf.

(7) Excessive Requests. If requests from a consumer are manifestly unfounded or excessive, in particular because of their repetitive character, we may either:

​

(a) charge a reasonable fee, or

(b) refuse to act on the request and notify the consumer of the reason for refusing the request. If we charge a fee, the amount will be based upon the administrative costs of providing the information or communication or taking the action requested.