Looky Looky Vendor Mall is proudly headquartered in Los Angeles, California — which means our home state’s privacy laws aren’t just a legal obligation for us, they’re local pride. This section explains the rights available to California residents under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and how to exercise them. Everything here supplements the rest of our Privacy Policy; where this section is more specific, it controls for California residents.
Categories of Personal Information We Collect
In the preceding 12 months, we have collected the following categories of personal information, as those categories are defined by the CCPA:
Identifiers. Name, postal address, email address, IP address, and account login details. Collected directly from you when you place an order, create an account, or contact support, and automatically when you visit our store.
Customer Records (Cal. Civ. Code § 1798.80(e)). Billing and shipping address and order history. Payment card details are collected and processed directly by our payment processors — we never see or store your full card number.
Commercial Information. Records of products you have purchased, considered, or added to your cart, and your purchasing history with us.
Internet or Other Electronic Network Activity. Browsing behavior on our store, pages viewed, time spent, referring website, device type, browser type, and interactions with our emails (such as opens and clicks, if you’ve opted into marketing).
Geolocation Data. Approximate location inferred from your IP address, used for fraud prevention and shipping estimates — never precise GPS-level tracking.
Inferences. Basic preferences drawn from your shopping activity (for example, that you’re interested in sealed hobby boxes rather than vintage toys), used only to improve your experience in our store.
We do not collect: biometric information, protected classification characteristics, professional or employment information, education information, or sensitive personal information such as social security numbers, driver’s license numbers, precise geolocation, or the contents of private communications.
Sources of Personal Information
We collect personal information from the following sources:
Directly from you — when you place an order, create an account, subscribe to our emails, or write to support@lookymall.shop
Automatically from your device — through cookies and similar technologies when you browse our store
From our service providers — such as our e-commerce platform (Shopify), payment processors, shipping carriers, and analytics providers, in the course of serving you
We do not purchase personal information from data brokers, and we do not collect information about you from social media platforms or other third-party sources.
Business Purposes for Collection
We collect and use the categories of personal information listed above for the following business purposes:
Fulfilling and shipping your orders, and sending transactional communications such as order confirmations and delivery updates
Detecting and preventing fraud, unauthorized transactions, and other malicious activity
Debugging, repairing, and improving our store’s functionality
Understanding aggregate shopping trends so we can stock what collectors actually want
Sending marketing emails to customers who have opted in
Complying with tax, accounting, and other legal obligations
Disclosure of Personal Information
In the preceding 12 months, we have disclosed the categories of personal information listed above to the following categories of service providers, strictly for business purposes:
E-commerce platform providers (identifiers, customer records, commercial information, network activity) — to host and operate our store
Payment processors (identifiers, customer records) — to securely process your transactions
Shipping and fulfillment carriers (identifiers, customer records) — to deliver your orders
Analytics providers (network activity, geolocation, inferences) — to understand store performance in aggregate
Each of these providers is contractually bound to use your information only to provide services to us, and not for their own purposes.
We Do Not Sell or Share Your Personal Information
In the preceding 12 months, Looky Looky Vendor Mall has not sold personal information, and has not shared personal information for cross-context behavioral advertising, as those terms are defined by the CCPA/CPRA. This includes the personal information of minors under 16 — which we do not knowingly collect in the first place. Because we do not sell or share personal information, there is no need for a “Do Not Sell or Share My Personal Information” link on our store. If our practices ever change, we will update this policy and provide a clear, functioning opt-out mechanism before any sale or sharing occurs.
Retention of Personal Information
We retain each category of personal information only as long as reasonably necessary for the purposes described above:
Order and transaction records — retained for the period required by federal and California tax and commercial law
Account information — retained while your account remains active, and deleted upon verified request
Support correspondence — retained as long as reasonably needed to resolve your issue and reference prior conversations
Automatically collected browsing data — retained in identifiable form only briefly, then aggregated or deleted
Your Rights Under the CCPA/CPRA
As a California resident, you have the following rights, free of charge:
Right to Know and Access. You may request, up to twice in a 12-month period, that we disclose: the categories of personal information we collected about you; the categories of sources; the business purposes for collection; the categories of third parties to whom we disclosed it; and the specific pieces of personal information we hold about you.
Right to Delete. You may request that we delete personal information we collected from you. We will honor your request unless an exception applies — for example, we must retain records needed to complete a transaction you initiated, detect security incidents, or comply with a legal obligation. If we deny a deletion request in part, we will tell you which exception applies.
Right to Correct. If you believe personal information we maintain about you is inaccurate, you may request that we correct it, and we will use commercially reasonable efforts to do so.
Right to Opt Out of Sale or Sharing. As stated above, we do not sell or share personal information — so this right is automatically honored for every customer, every day.
Right to Limit Use and Disclosure of Sensitive Personal Information. We do not collect sensitive personal information as defined by the CPRA, and we do not use or disclose any personal information for purposes that would trigger this right.
Right to Non-Discrimination. We will never deny you goods or services, charge you a different price, impose penalties, or provide a lower quality of service because you exercised any of your privacy rights. Exercising your rights costs you nothing — not money, and not your standing as a valued customer.
How to Submit a Request
To exercise any of these rights, email us at support@lookymall.shop with the subject line “California Privacy Request” and tell us which right(s) you wish to exercise. Because we operate without a phone line, email is our official — and fastest — channel for privacy requests.
Verification. To protect your information from imposters, we must verify your identity before fulfilling a request to know, delete, or correct. We typically do this by matching the email address and order details you provide against our records. For requests involving specific pieces of personal information, we may ask for additional verification. We will never ask you for a password or payment card number to verify a privacy request.
Authorized Agents. You may designate an authorized agent to submit a request on your behalf. We will require the agent to provide proof of your written authorization, and we may still contact you directly to confirm the request.
Response Timing. We will confirm receipt of your request within 10 business days and respond substantively within 45 calendar days. If we need more time (up to an additional 45 days), we will notify you in writing with the reason for the delay. Disclosures will cover the 12-month period preceding your request and will be delivered by email in a portable, readily usable format.
“Shine the Light” (Cal. Civ. Code § 1798.83)
Separate from the CCPA, California’s “Shine the Light” law permits residents to request information about the disclosure of personal information to third parties for those parties’ own direct marketing purposes. Looky Looky Vendor Mall does not disclose personal information to third parties for their direct marketing purposes. If you have questions, email support@lookymall.shop with the subject line “Shine the Light Request.”
Do Not Track
Some browsers transmit “Do Not Track” signals. Because no industry standard for responding to these signals has been established, our store does not currently respond to them. However, since we do not sell or share your personal information or track you across third-party websites for advertising, the practical outcome is the same as if we did.
Changes to This Section
We review this California Privacy Rights section at least once every 12 months, as required by law, and update it whenever our practices change. The “Last updated” date at the top of this Privacy Policy reflects the most recent revision.
Contact Us
Looky Looky Vendor Mall 14214 S Figueroa St, Los Angeles, CA 90061 Email: support@lookymall.shop
