California Privacy Notice (CCPA/CPRA)

Last updated: August 1, 2026

This California Privacy Notice supplements our Privacy Policy. It applies to residents of California and is provided under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"). Terms defined in the CCPA and CPRA have the same meaning here.

The business responsible for the personal information described in this notice is MD LDA LLC, trading as Pearl Asheville.

Categories of Personal Information We Collect

In the last twelve months we have collected the following categories of personal information, as those categories are defined in Cal. Civ. Code § 1798.140(v):

• Identifiers — name, postal address, email address, phone number, IP address, account and order identifiers, cookie and device identifiers.
• Customer records information — billing and shipping address, and payment information handled by our payment providers. We do not receive or store your full card number.
• Commercial information — products viewed and purchased, order history, returns, and customer service correspondence.
• Internet or other electronic network activity — browsing and search activity on our website, pages viewed, referring site, and how you interact with our emails and advertising.
• Geolocation data — approximate location inferred from your IP address, used for fraud prevention, sales tax and content relevance. We do not collect precise geolocation.
• Inferences — preferences and characteristics drawn from the information above, used to recommend products and to target advertising.

We collect this information from you directly, automatically through cookies and similar technologies when you use our website, and from service providers such as our ecommerce platform, payment processors, shipping carriers and advertising partners.

We use it to fulfill and deliver your orders, take payment, provide customer support, prevent fraud, meet legal obligations, improve our website and products, and market to you. We keep each category only for as long as it is needed for those purposes or as required by law.

Sensitive Personal Information

We do not collect sensitive personal information in order to infer characteristics about you, and we do not use or disclose it beyond the purposes permitted under Cal. Civ. Code § 1798.121(a). For that reason we are not required to offer, and do not offer, a separate "Limit the Use of My Sensitive Personal Information" control.

Sale and Sharing of Personal Information

We do not sell your personal information for money.

We do, however, disclose identifiers, internet activity and inferences to advertising and analytics partners so that advertising can be targeted to you across other websites and services. Under the CCPA and CPRA this counts as "sharing" for cross-context behavioral advertising, and under some other state privacy laws it may count as a "sale". We state this plainly so that you can decide for yourself.

We have not sold or shared the personal information of consumers we know to be under 16 years of age, and we do not knowingly collect personal information from children under 16.

Your Right to Opt Out of the Sale or Sharing of Your Personal Information

You have the right to tell us to stop selling or sharing your personal information.

Do Not Sell or Share My Personal Information — Your Privacy Choices

Opting out does not stop you from using this website or from ordering, and we will not charge you a different price or give you a lower level of service because you opted out. An opt-out applies to the browser and device you use to make it, so please repeat it on each browser and device you use, and again if you clear your cookies.

Global Privacy Control

We recognize the Global Privacy Control ("GPC") signal. If your browser or a browser extension sends a GPC signal, we treat it as a valid request to opt out of the sale and sharing of personal information for the browser and device that sent it. Where we can link that device to an account, we apply the opt-out to the account as well. You can learn more at globalprivacycontrol.org. Other than GPC, we do not respond to "Do Not Track" signals sent by browsers or devices.

Your Other California Rights

• Right to know. You may ask for the categories and the specific pieces of personal information we have collected about you, the categories of sources, our purposes for collecting it, and the categories of third parties we disclosed it to.
• Right to delete. You may ask us to delete personal information we collected from you, subject to the exceptions in the CCPA — for example, we must keep records of completed transactions.
• Right to correct. You may ask us to correct inaccurate personal information we hold about you.
• Right to opt out of sale or sharing. As described above.
• Right to limit the use of sensitive personal information. See the section on sensitive personal information above.
• Right to non-discrimination. We will not deny you goods or services, charge you a different price, or give you a different level of quality because you exercised a privacy right.

How to Exercise Your Rights

To opt out of the sale or sharing of your personal information, use Your Privacy Choices.

For any other request, email support@pearl-asheville.com with "California Privacy Request" in the subject line, and tell us which right you want to exercise.

Before we act on a request to know, delete or correct, we have to verify who you are. We do that by asking you to confirm information we already hold, such as the email address and order details linked to your purchases. We ask only for what is needed to match you to our records, and we use that information for no other purpose. If we cannot verify you, we will tell you why.

We confirm receipt of your request within 10 business days and respond within 45 calendar days. If we need more time we will tell you before the 45 days are up, and we will take no more than 90 days in total.

Authorized Agents

You may use an authorized agent to make a request on your behalf. We will ask the agent for written permission signed by you, and we may still ask you to verify your own identity directly with us, unless the agent holds a valid power of attorney under California Probate Code §§ 4000–4465.

Appeals

If we decline your request, you may ask us to reconsider by replying to our decision email. We will review the appeal and give you a written answer with our reasons.

Residents of Other States

Residents of other states with comprehensive privacy laws may have similar rights, including the right to opt out of targeted advertising and of the sale of personal information. We honor those requests through the same channels described above.

Contact

Questions about this notice, or about how we handle your personal information? Email support@pearl-asheville.com.

Business Information

MD LDA LLC
30 N Gould St Ste R
Sheridan, WY 82801
United States

Email: support@pearl-asheville.com
Website: pearl-asheville.com
Customer care hours: Monday to Sunday, 9:00 a.m. to 6:00 p.m. Eastern Time
Response time: we reply to every email within 24–48 hours