CCPA: The California Consumer Privacy Act

Intro

Mailrith works to support individual privacy rights and gives customers tools that can help with Subscriber data access, exports, unsubscribe handling, deletion workflows, and privacy requests.

This article is product help, not legal advice. The CCPA, as amended by the CPRA, may apply differently depending on your business, your data practices, and your relationship with California residents. Ask your attorney if you have legal questions.

What It Means

The CCPA gives certain California residents rights over their personal information. These rights may include the right to know, access, delete, correct, or opt out of certain uses of personal information.

For Mailrith customers, this means you should understand:

• What Subscriber data you collect.
• Why you collect it.
• Where it is stored.
• Which providers receive it.
• How you respond to access or deletion requests.
• Whether your connected tools have separate privacy steps.

Mailrith can help with data stored in Mailrith. Customer-connected providers may need separate review or deletion outside Mailrith.

What Is Considered Personal Information Under The CCPA?

Personal information under the CCPA can include information that identifies, relates to, describes, or could reasonably be linked to a person or household.

For Subscribers, this may include:

• Email address.
• Name.
• Location details.
• Tags.
• Segments.
• Form or landing page activity.
• Email engagement data.
• Custom fields.
• Consent records.
• Subscription status.

Do not store sensitive information in Mailrith that Mailrith is not designed to handle, including health records, payment card numbers, government identity numbers, passwords, children's data, or similarly sensitive information.

What Businesses Are Subject To The CCPA?

The CCPA applies to certain businesses that meet legal thresholds and handle personal information from California residents.

Mailrith does not decide whether the CCPA applies to your business. Review your data practices with your attorney.

You may want to consider:

• Whether you collect data from California residents.
• How much personal information your business handles.
• Whether you share data with service providers or other third parties.
• Whether your business meets CCPA or CPRA thresholds.
• Whether your Privacy Policy explains your practices.

Will Mailrith Help Customers Who Receive Access Or Deletion Requests Under The CCPA?

Yes. Mailrith provides support paths for privacy requests involving data in Mailrith.

Before asking Mailrith for help, verify the request through your own privacy process. Then check whether the Subscriber's data also exists in customer-connected tools such as email delivery services, webhooks, Zaps, CRMs, AI services, or internal systems.

For Mailrith support, email support@mailrith.com and include:

• Workspace name.
• Subscriber email address.
• Request type.
• Verification status.
• Due date.

Mailrith can help with data in Mailrith. You are responsible for reviewing and handling data in the other systems you choose to use.

Will Mailrith Help Customers Meet The CCPA Contract Requirement?

Mailrith provides a DPA. You can also review Mailrith's Terms of Service and Privacy Policy.

If you need specific contract language or need to confirm whether the DPA meets your CCPA or CPRA requirements, ask your attorney.

Mailrith does not provide legal advice and does not determine whether your contracts satisfy your obligations.

What Is A Business Purpose Under The CCPA?

A business purpose is a reason a business uses personal information to operate or provide services.

In a Mailrith context, business purposes may include:

• Managing Subscribers.
• Sending emails through customer-chosen email delivery services.
• Handling unsubscribes.
• Supporting Segments and Tags.
• Providing exports.
• Supporting privacy requests.
• Connecting to customer-connected integrations.

Your own business purposes may be broader than your use of Mailrith. Document your purposes in your own records and Privacy Policy.

Does Mailrith Sell Personal Information Under The CCPA?

Mailrith does not sell Subscriber Personal Data.

Mailrith sends through customer-chosen email delivery services and other customer-connected tools. You should review the privacy terms and data use practices of each service or tool you connect to Mailrith, including email delivery services, webhooks, Zaps, CRMs, AI services, and internal systems.

Ask your attorney if you need help deciding whether your own data sharing is considered a sale, sharing, or another regulated disclosure under the CCPA or CPRA.