Privacy Policy
1. Introduction & About Us
Stockorlo ("we", "us", or "our") operates stockorlo.com and related services (the "Service"). Our principal place of business is located at 1201 Third Avenue, Suite 4500, Seattle, WA 98101.
We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information, with specific disclosures required by the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), effective January 1, 2023.
For privacy inquiries, contact us at:
Email: [email protected]
Phone: +1 (206) 559-6097
Postal: Privacy Team, Stockorlo, 1201 Third Avenue, Suite 4500, Seattle, WA 98101
2. Categories of Personal Information We Collect
In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:
| CCPA Category | Examples | Collected? | Sources |
|---|---|---|---|
| A. Identifiers | Real name, alias, email address, IP address, account name, unique personal identifiers | Yes | You directly; automatically |
| B. Personal Records (Cal. Civ. Code § 1798.80) | Name, address, telephone number, financial information | Yes | You directly |
| C. Protected Classifications | Age (40+), race, gender, veteran status | Limited / Only if voluntarily provided | You directly (optional) |
| D. Commercial Information | Products/services purchased, purchase history, preferences | Yes | You directly; transactions |
| E. Biometric Information | Fingerprints, face/voice recognition data | No | — |
| F. Internet / Electronic Activity | Browsing history on our site, interaction with our content | Yes | Automatically via cookies/analytics |
| G. Geolocation Data | Physical location derived from IP address (city/country level) | Yes (approximate) | Automatically |
| H. Sensory Data | Audio recordings (if phone support applicable) | Only if you contact us by phone | You directly (if applicable) |
| I. Professional / Employment Info | Job title, employer, professional background | Only if voluntarily provided | You directly |
| J. Education Information | Education history | No | — |
| K. Inferences | Profile reflecting preferences, predispositions, behaviour | Yes (for personalisation) | Derived from categories above |
| L. Sensitive Personal Information | Account log-in + password (security credentials) | Yes (credentials only) | You directly (account creation) |
2.1 Sources of Personal Information
- Directly from you — forms, account registration, purchases, support requests, surveys;
- Automatically — cookies, web beacons, server logs when you use our Service;
- Third parties — analytics providers, advertising partners, social media platforms.
3. Business & Commercial Purposes for Collection & Use
We collect and use personal information for the following business and commercial purposes:
- Providing, maintaining, and improving our products and services;
- Processing transactions and managing accounts;
- Sending transactional communications (receipts, account alerts, service notices);
- Providing customer support and responding to inquiries;
- Personalising your experience and content;
- Conducting analytics to understand how our Service is used;
- Sending marketing communications (where you have opted in or where permitted);
- Fraud prevention, security monitoring, and protecting legal rights;
- Complying with applicable laws, regulations, and legal process;
- Evaluating or conducting a merger, divestiture, or other business transaction;
- Advertising and marketing to you, including cross-context behavioural advertising.
4. Disclosure, Sale & Sharing of Personal Information
4.1 Categories Disclosed for Business Purposes
In the past 12 months, we have disclosed the following categories of personal information to service providers and contractors for business purposes:
- Identifiers (A) — to cloud hosting, email providers, analytics providers;
- Commercial information (D) — to payment processors, fulfilment partners;
- Internet / electronic activity (F) — to analytics and advertising platforms;
- Inferences (K) — to content personalisation platforms.
4.2 Sale & Sharing of Personal Information
Under the CCPA, "sale" includes exchanging personal information for money or other valuable consideration. "Sharing" includes disclosing personal information to third parties for cross-context behavioural advertising, even without monetary exchange.
| PI Category | Sold? | Shared for Cross-Context Behavioural Advertising? | Third-Party Recipients |
|---|---|---|---|
| Identifiers (A) | No | Yes (cookie IDs, IP) | Analytics, ad networks |
| Internet / Electronic Activity (F) | No | Yes (browsing behaviour) | Analytics, ad networks |
| Inferences (K) | No | Yes (interest segments) | Ad platforms |
| All other categories | No | No | — |
4.3 Do Not Sell or Share — Opt-Out
California residents have the right to opt out of the sale or sharing of their personal information at any time. To exercise this right:
- Click the link: Do Not Sell or Share My Personal Information
- Global Privacy Control (GPC): We honour GPC signals. If your browser transmits a GPC signal, we will treat it as an opt-out request.
- Email: [email protected] with subject "CCPA Opt-Out Request".
Once we receive your opt-out request, we will cease the sale or sharing of your personal information within 15 business days.
4.4 Sensitive Personal Information
We collect only the following sensitive personal information (SPI) and use it solely for the purposes of providing our services:
- Account log-in credentials (username + hashed password) — used solely to authenticate your account;
We do not use or disclose sensitive personal information for purposes beyond those necessary to provide the Service. You may exercise the right to limit our use of sensitive personal information by contacting us at [email protected].
4.5 Financial Incentives
We may offer financial incentives (discounts, loyalty rewards) in exchange for personal information. These incentives have a reasonably proportionate relationship to the value of your personal information. Participation is voluntary and you may withdraw at any time.
5. Your California Privacy Rights
If you are a California resident, you have the following rights under the CCPA/CPRA:
Right to Know
Request disclosure of the categories and specific pieces of personal information we have collected about you. You may request this up to twice per 12-month period.
Right to Delete
Request deletion of personal information we have collected, subject to certain exceptions (completing a transaction, security, legal obligations).
Right to Opt-Out of Sale/Sharing
Direct us not to sell or share your personal information with third parties for cross-context behavioural advertising.
Right to Non-Discrimination
We will not discriminate against you for exercising your CCPA rights.
Right to Correct
Request correction of inaccurate personal information we maintain about you.
Right to Limit SPI Use
Direct us to limit our use and disclosure of sensitive personal information to what is necessary to perform the services you request.
5.1 How to Submit a Consumer Request
California residents may submit requests by:
- Email: [email protected] with subject "CCPA Privacy Request";
- Phone: +1 (206) 559-6097;
- Postal mail: Stockorlo, Attn: Privacy Team, 1201 Third Avenue, Suite 4500, Seattle, WA 98101.
5.2 Verification of Requests
To protect your information, we must verify your identity before fulfilling a request. We will ask you to provide information that matches what we have on file. Authorised agents: You may designate an authorised agent to make a CCPA request on your behalf. We may require written proof of authorisation.
5.3 Response Timeline
We will acknowledge your request within 10 business days and respond within 45 calendar days. If we need more time, we will notify you and may extend by an additional 45 days.
6. Retention of Personal Information
We retain personal information for as long as necessary to fulfil the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements.
| Category | Retention Period |
|---|---|
| Account / identity data | Duration of account + 2 years after closure |
| Transaction / purchase history | 7 years (tax/legal compliance) |
| Customer support records | 3 years from last interaction |
| Marketing consent / opt-out records | Indefinitely (to honour your preference) |
| Analytics / usage data | 26 months |
| Security / fraud logs | 12 months |
7. Security of Personal Information
We implement reasonable and appropriate technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including encryption in transit (TLS) and at rest, access controls, and employee training. No system is 100% secure; please use strong passwords and notify us promptly of suspected unauthorized access.
8. Children's Privacy
We do not knowingly collect personal information from consumers under 16 years of age. If you believe we have collected personal information from a minor under 16, please contact us at [email protected] and we will delete it promptly. We do not sell or share the personal information of consumers we know to be under 16 without affirmative authorisation.
9. Privacy Rights for Other Jurisdictions
Residents of other U.S. states with comprehensive privacy laws (including Virginia — VCDPA, Colorado — CPA, Connecticut — CTDPA, Utah — UCPA, Texas — TDPSA, and others) may have similar rights. For more information about your state-specific rights, please contact us at [email protected].
10. Cookies & Online Tracking
We and our partners use cookies, web beacons, pixels, and similar tracking technologies to collect internet/electronic activity data. Some of this data is used for cross-context behavioural advertising, which constitutes "sharing" under the CCPA. You may opt out by:
- Using our cookie consent banner when you first visit;
- Clicking Do Not Sell or Share My Personal Information;
- Enabling the Global Privacy Control (GPC) in your browser.
See our Cookie Policy for full details.
11. Changes to This Privacy Policy
We may update this Privacy Policy as required by changes in law or our practices. When we make material changes, we will update the "Last updated" date and provide appropriate notice. We encourage you to review this policy periodically.
12. Contact Us
For questions, concerns, or to exercise your privacy rights:
- Company: Stockorlo
- Email: [email protected]
- Phone: +1 (206) 559-6097
- Address: 1201 Third Avenue, Suite 4500, Seattle, WA 98101
- Do Not Sell / Opt-Out: stockorlo.com/do-not-sell