Last Updated:

Effective Date:

This California Consumer Privacy Notice (“Notice”) supplements the FATESPUN Privacy Policy and applies solely to individuals who are residents of the State of California (“California Consumers” or “you”). This Notice is intended to comply with the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act of 2020 (“CPRA”). Terms used in this Notice have the meanings assigned under the CCPA/CPRA.

Where there is a conflict between this Notice and the FATESPUN Privacy Policy, this Notice governs with respect to California Consumers.

1. Categories of Personal Information Collected

In the preceding 12 months, FATESPUN has collected the following categories of Personal Information as defined under §1798.140(v) CCPA/CPRA:

|Category(Statutory Code)|Examples| Collected? |

|Identifiers(A)|Name,Email address,IP address| ✔ Yes|

|Customer Records(B)|Billing-related metadata(via processor)| ✔ Yes|

|Protected Characteristics(C)|Birth date| ✔ Yes|

|Commercial Information(D) |Order history,transaction confirmations| ✔ Yes |

|Internet or Network Activity(F)|Browser data,device data,usage logs| ✔ Yes|

|Geolocation Data(G)|Approximate location(IP-based)| ✔ Yes|

|Sensory Data(H)|None | ✘ No |

|Professional/Employment Data(I)|None| ✘ No|

|Education Data(J)|None| ✘ No|

|Inferences(K)|Not created(AI outputs do not generate legally defined “inferences” about consumer characteristics)| ✘ No |

|Sensitive Personal Information(L) | Government ID, precise geolocation, biometric info| ✘ No|

<<홈페이지엔 올바른 표 형식으로>>

FATESPUN does not intentionally collect Sensitive Personal Information as defined under CPRA §1798.140(ae).

2. Sources of Personal Information

We collect Personal Information from the following sources:

* Directly from consumers (information entered into forms)

* Automatically from consumer devices (usage logs, IP-based data)

* Service providers (payment processors, email delivery partners)

We do not obtain consumer data from data brokers.

3. Purposes for Collecting Personal Information

FATESPUN collects Personal Information for the following purposes:

1. Providing AI-generated digital reports

2. Processing transactions and delivering purchased services

3. Maintaining security and preventing fraud

4. Performing debugging, error detection, and product improvement

5. Customer support and consumer request verification

6. Complying with legal and regulatory requirements

We do not use Personal Information for profiling, automated decision-making with legal effects, or cross-context behavioral advertising.

4. Disclosure of Personal Information to Third Parties

In the last 12 months, we have disclosed the following categories of Personal Information to Service Providers for legitimate business purposes permitted by CCPA/CPRA (Cal. Civ. Code §1798.140(e)):

* Identifiers

* Customer Records

* Internet Activity

* Commercial Information

* Approximate Geolocation

Disclosure is limited to:

* Cloud hosting providers

* Email delivery partners

* Payment processors

* Analytics providers (non-targeted)

These third parties are contractually obligated to use Personal Information only for the services requested by FATESPUN.

5. No Sale or Sharing of Personal Information

FATESPUN does not sell Personal Information (Cal. Civ. Code §1798.140(ad)) and does not share Personal Information for cross-context behavioral advertising (§1798.140(ah)).

Accordingly:

The right to opt-out of sale or sharing does not apply to our business.

If FATESPUN’s practices change, we will update this Notice and provide a compliant “Do Not Sell or Share My Personal Information” mechanism.

6. Retention of Personal Information

We retain each category of Personal Information only for as long as necessary to fulfill the purposes disclosed in this Notice, consistent with §1798.100(a)(3) CPRA and the FATESPUN Privacy Policy.

Retention schedules are detailed in the main Privacy Policy.

7. California Consumer Rights

California Consumers have the following rights under CCPA/CPRA:

✔ Right to Know

What categories of Personal Information we collect, use, disclose, or retain.

✔ Right to Access

To obtain a copy of your Personal Information.

✔ Right to Delete

To request deletion of Personal Information, subject to legal exceptions.

✔ Right to Correct

To request correction of inaccurate Personal Information.

✔ Right to Data Portability

To receive data in a structured, commonly used, machine-readable format.

✔ Right to Opt-Out of Sale/Sharing

(Not applicable — no sale or sharing occurs.)

✔ Right to Limit Use of Sensitive Personal Information

(Not applicable — FATESPUN does not collect sensitive personal data.)

✔ Right to Non-Discrimination

We will not discriminate against consumers for exercising their CCPA rights.

8. Submitting Consumer Requests

You may submit requests in any of the following ways:

contact.fatespun@gmail.com

Requests must include sufficient information to verify your identity, such as:

* Email address associated with your transaction

* Recent order ID or timestamp

* Additional verification steps if required by law

We will respond within the timeframes required under CCPA/CPRA.

9. Authorized Agents

You may designate an authorized agent to act on your behalf.

We may require:

1. Written authorization signed by the consumer

2. Proof of agent identity

3. Direct confirmation from the consumer

10. Minors (Under 16 Years)

FATESPUN does not knowingly sell or share the Personal Information of consumers under the age of 16.

11. Updates to This Notice

We may amend this Notice to reflect changes in law or operational practices.

Updated versions will include a revised “Last Updated” date.

12. Contact Information

For questions regarding this Notice:

contact.fatespun@gmail.com

Attn: Privacy Officer

FATESPUN, Inc.