Effective date: September 15, 2026
Last updated: September 15, 2026
Cali Life, LLC, doing business as Cali Life Co. ("Cali Life," "we," "us"), runs calilifeco.com, the Cali Life Co. blog, and our email and text message programs. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices and rights you have. It applies to everyone who visits our site, buys from us, or joins our email or text lists.
Plain-language summary: we collect what we need to sell you sunglasses and run our store. We use Google and Klaviyo tools that place cookies and track how you use our site, including for advertising. Under California law, some of that counts as "sharing" personal information for targeted advertising. You can opt out of it at any time on our Do Not Sell or Share My Personal Information page, and we honor Global Privacy Control signals from your browser automatically. We do not sell your personal information for money.
1. Information we collect
Information you give us
- Order and account information: name, email address, phone number, shipping and billing address, order details, and the items you buy. Payment card numbers go directly to our payment processors (see Section 4) and never touch our servers.
- Marketing sign-ups: email address when you join our list through a form, popup, or checkout; mobile number when you opt in to text messages.
- Customer service and warranty: anything you send us by email, chat, or our forms, including photos of a damaged frame for a warranty claim and your order number.
- Prescription lens orders: if you order prescription lenses through the lens-selection tool on a product page, the lens vendor collects the prescription values you enter. We receive the lens specification needed to fill the order. We do not ask for or store medical records.
- Reviews, giveaways, and social posts: what you submit, plus your name or handle if you include it.
Information collected automatically
When you use our site we and our service providers collect device and usage data through cookies, pixels, and similar technologies: IP address, approximate location derived from it, browser and device type, operating system, referring page, pages viewed, products viewed and added to cart, time on page, clicks, and identifiers like cookie IDs and advertising IDs. Section 3 lists every tool that does this.
Information from other sources
- Shopify (our store platform) and Shop Pay, Apple Pay, Google Pay, PayPal, and Afterpay pass us order, fulfillment, fraud-screening, and payment-status information.
- Printful (our apparel printing partner) passes us shipment and tracking information for apparel orders.
- Shipping carriers (USPS, UPS, FedEx, DHL) pass us delivery status.
- Google passes us aggregated analytics and advertising performance data.
- Social platforms pass us public profile information if you interact with our accounts or tag us.
2. How we use information
- Process, ship, and support your orders, warranty claims, exchanges, and returns.
- Send order confirmations, shipping updates, and account notices.
- Send marketing emails and text messages if you have opted in (Sections 6 and 7).
- Show you our ads on Google and other platforms, and measure whether our ads and emails work.
- Understand how people use our site so we can fix problems and improve it.
- Detect and prevent fraud, click fraud on our ads, abuse, and security incidents.
- Comply with law, respond to legal requests, and enforce our terms.
We do not use your information for automated decisions that have legal or similarly significant effects on you.
3. Cookies and tracking technologies
These are the tools that set cookies or collect device data on calilifeco.com, what they do, and how to opt out. "Advertising" tools are the ones covered by the opt-out in Section 5.
| Tool | Provider | Purpose | Type |
|---|---|---|---|
| Shopify storefront and checkout | Shopify Inc. | Cart, checkout, login, fraud screening, site analytics for us | Essential + analytics |
| Klaviyo | Klaviyo, Inc. | Email and text marketing, onsite forms, tracks product views and cart activity for people on our list so we can send relevant emails | Marketing (first party) |
| Google Analytics 4 | Google LLC | Site usage measurement. Google Signals is enabled, which links activity across your signed-in Google devices for reporting and ad audiences | Analytics + advertising |
| Google Ads | Google LLC | Conversion tracking and remarketing audiences so we can show you our ads on Google properties after you visit | Advertising |
| Google Tag Manager | Google LLC | Loads the tags above. Collects no data on its own | Utility |
| Google AdSense (blog pages only) | Google LLC and its certified ad partners | Shows third-party ads on our blog articles. Google and its partners use cookies to serve ads based on your visits to this and other sites | Advertising |
| hCaptcha | Intuition Machines, Inc. (via Shopify) | Blocks bots on sign-up and contact forms | Security |
| ClickCease | CHEQ AI Technologies | Detects click fraud on our Google Ads by analyzing IP address and device signals of ad clicks | Security |
| Afterpay widget | Afterpay / Block, Inc. | Shows installment pricing on product pages | Payment |
| Shop Pay, Apple Pay, Google Pay, PayPal | Shopify, Apple, Google, PayPal | Payment at checkout under each provider's own privacy policy | Payment |
| Lens-selection tool | LensAdvizor | Lets you add prescription or custom lenses to a frame | Functional |
| Spin-to-win popup | Spicegems | Optional discount game that collects an email address if you play | Functional |
| Shopify Inbox | Shopify Inc. | Live chat on the site | Functional |
| Yotpo reviews and loyalty widgets | Yotpo Ltd. | Displays product reviews and rewards on product pages and lets you submit a review | Functional |
Third-party advertising on our blog. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and other sites on the Internet. You can opt out of personalized advertising by visiting Google Ads Settings, or opt out of many third-party vendors' cookies at www.aboutads.info/choices. The vendors that may serve ads on our blog are listed in Google's ad technology providers list. Visitors in the European Economic Area, United Kingdom, and Switzerland see a consent message before any advertising cookies are set on blog pages.
Managing cookies. You can block or delete cookies in your browser settings. If you block essential cookies, checkout will not work. You can opt out of Google Analytics with the Google Analytics opt-out add-on. Advertising cookies from all of the tools above are turned off when you use our Do Not Sell or Share opt-out or send a Global Privacy Control signal.
4. Who we share information with
We share personal information only in these ways:
- Service providers that work for us under contract: Shopify (store, checkout, hosting, chat), Klaviyo (email and text), Printful (apparel printing and shipping), shipping carriers, Google (analytics and tag management), ClickCease (fraud), LensAdvizor (lens orders), Yotpo (reviews and loyalty), hCaptcha (bot protection), and the app vendors named in Section 3. They may only use your information to provide their service to us.
- Payment processors: Shopify Payments, Shop Pay, Apple Pay, Google Pay, PayPal, and Afterpay process your payment under their own privacy policies. We never see your full card number.
- Advertising partners: Google Ads, Google Analytics with Google Signals, and Google AdSense receive device identifiers, cookie IDs, IP address, and site activity to show you ads and measure them. This is the sharing you can opt out of in Section 5.
- Legal and safety: when required by law, subpoena, or court order, or to protect our rights, customers, or the public.
- Business transfers: if Cali Life is sold, merged, or winds down, customer information may transfer to the successor under this policy.
We do not sell personal information in exchange for money. We do not share your information with data brokers.
5. Your right to opt out of sale or sharing and targeted advertising
Under the California Consumer Privacy Act and similar state laws, using Google Ads remarketing, Google Signals, and AdSense counts as "sharing" personal information for cross-context behavioral advertising (also called targeted advertising). You can opt out at any time, and we will not treat you differently for doing so:
- Click Do Not Sell or Share My Personal Information and press the opt-out button. This sets a cookie that turns off the advertising tools on this device and browser.
- Global Privacy Control: if your browser or extension sends a GPC signal, we treat it as an opt-out request automatically, with nothing else required from you. We treat a Do Not Track signal the same way.
- Email contact@calilifeco.com with the subject "Opt out" and we will also opt out the email address and phone number you give us from any ad audiences we build from our customer list.
Cookie-based opt-outs apply to the device and browser you use them on. If you clear cookies or switch devices, opt out again or use a GPC-enabled browser.
6. Email marketing
We send marketing emails only to people who signed up on our site, at checkout, or through a giveaway. Every marketing email has an unsubscribe link, and we process unsubscribes within 10 business days as required by the CAN-SPAM Act. Unsubscribing from marketing does not stop order and shipping emails.
7. Text message (SMS) marketing
We send marketing texts only to mobile numbers that opted in through our checkout, a sign-up form, or a keyword. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to any message to cancel, or HELP for help. You may also revoke consent by any reasonable means, including replying with words like "stop," "cancel," "unsubscribe," or "quit," or by emailing us, and we will honor it within 10 business days. Full program terms are in our SMS Terms. We do not share mobile numbers or SMS consent with third parties for their marketing.
8. Your privacy rights
All United States residents
Whether or not your state's privacy law applies to a business of our size, we honor these requests from anyone in the United States:
- Know and access: the categories and specific pieces of personal information we hold about you, where we got it, why we use it, and who we shared it with.
- Delete: personal information we collected from you, subject to legal exceptions such as completing your order, handling a warranty claim, or keeping tax records.
- Correct: inaccurate personal information.
- Portability: a copy of your information in a usable format.
- Opt out of sale, sharing, and targeted advertising (Section 5).
- No discrimination for exercising any right.
How to submit a request: email contact@calilifeco.com, or use the form on our privacy requests page. Both are free. We will confirm receipt within 10 business days and respond within 45 days. If we need more time, we will tell you why and take up to 45 more days. To protect you, we verify requests by matching the details you give us against the order or account information we hold, and we may ask you to confirm from the email address on file. We never require you to create an account.
Authorized agents: you may have someone else submit a request for you. We will ask for signed permission from you and may verify your identity directly.
Appeals: if we deny your request, you may appeal by replying to our decision email within 60 days. We will answer within 45 days. If we deny the appeal, we will tell you how to contact your state Attorney General.
California residents: additional disclosures
In the 12 months before the effective date we collected these categories of personal information as defined in California Civil Code 1798.140: identifiers (name, email, phone, address, IP address, cookie and device IDs); customer records (billing and shipping details, order history); commercial information (products viewed and purchased); internet or network activity (pages viewed, clicks, referring site, cart activity); geolocation (approximate, from IP address); inferences (which products you might like, drawn from what you view and buy); and, only if you order prescription lenses through the lens tool, the lens specification you entered. We collected them from you directly, from your device automatically, and from the partners in Section 1. We used them for the purposes in Section 2.
We disclosed identifiers, customer records, commercial information, and internet activity to service providers for a business purpose. We shared identifiers (cookie and device IDs, IP address) and internet activity with Google for cross-context behavioral advertising. We do not sell personal information, and we have no actual knowledge that we sell or share the personal information of anyone under 16.
We do not collect sensitive personal information as defined by the CCPA other than the prescription values described above, which we use only to fill your order.
Retention: see Section 10.
Shine the Light (Civil Code 1798.83): we do not disclose personal information to third parties for their own direct marketing.
Financial incentives: our discount for joining the email or text list is a financial incentive under the CCPA. We value the personal information you provide at the discount amount, based on the cost of acquiring a new subscriber through advertising. You can withdraw at any time by unsubscribing.
Nevada residents
We do not sell covered information as defined by Nevada law. You may still submit an opt-out request at contact@calilifeco.com.
Outside the United States
Our store is built for United States customers and our products are made in and shipped from the United States. If you order from the European Economic Area, United Kingdom, Switzerland, Canada, or Australia, your information is transferred to and processed in the United States. Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract (orders and support), consent (marketing emails and texts, advertising cookies on the blog), and legitimate interests (site security, fraud prevention, analytics that does not track you across sites). You have the rights to access, rectify, erase, restrict, port, and object, and to withdraw consent at any time without affecting earlier processing. Contact us at contact@calilifeco.com. You may also complain to your local data protection authority. We rely on the European Commission's Standard Contractual Clauses and our processors' own transfer safeguards for these transfers.
9. Children
Our site is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email contact@calilifeco.com and we will delete it.
10. How long we keep information
- Order, payment, and warranty records: 7 years after the order, for tax, accounting, and lifetime-warranty service.
- Marketing list information: until you unsubscribe or opt out, then only a suppression record so we do not contact you again.
- Customer service messages: 3 years after the last message.
- Analytics and advertising data held in Google tools: 2 months of user-level data in Google Analytics, and the audience membership periods set in Google Ads, which do not exceed 540 days.
- Website logs and security data: up to 12 months.
11. Security
Our store runs on Shopify, which is PCI DSS Level 1 certified. All pages use HTTPS. Access to customer data is limited to the people and tools that need it. No system is perfectly secure, so if we learn of a breach that affects you we will notify you as required by law.
12. Do Not Track and Global Privacy Control
California law requires us to say how we respond to browser Do Not Track signals. We honor both Do Not Track and Global Privacy Control: when we detect either signal, we turn off the advertising and cross-site tracking tools listed in Section 3 for that browser. Essential cookies and first-party analytics needed to run the store still operate.
13. Links to other sites
Our site and emails link to other companies, including social networks, payment providers, and review sites. Their privacy practices are their own. Read their policies before giving them information.
14. Changes to this policy
When we change this policy we will update the effective date at the top. For material changes that affect how we use information you have already given us, we will also email subscribers or post a notice on our home page before the change takes effect. Earlier versions are available on request.
15. Contact us
Cali Life, LLC (d/b/a Cali Life Co.)
502 University Ave, San Diego, CA 92103
Email: contact@calilifeco.com
Privacy requests: calilifeco.com/pages/do-not-sell