California Privacy Notice
Effective date: 14 May 2026 · Version 1.0
This notice supplements the True Blue Horizon Privacy Policy and applies to California residents. It describes how we handle personal information under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
1. Notice at Collection
We collect the categories of personal information listed in Section 2 below for the purposes of providing the True Blue Horizon Service: account management, vessel monitoring, AI chat, analytics, billing, communications, security, and legal compliance. We retain personal information for the periods described in Section 6 of the Privacy Policy.
2. Categories of Personal Information Collected & Disclosed (Past 12 Months)
| Category | Examples | Source | Disclosed to | Sold / Shared |
|---|---|---|---|---|
| A. Identifiers | Name, email, account ID, IP, device/Gateway ID | Directly from you; Google OAuth | Sub-processors | No |
| B. § 1798.80(e) records | Billing address | Directly from you; Stripe | Stripe; tax authorities | No |
| D. Commercial information | Subscription, purchases | Directly from you | Stripe; sub-processors | No |
| F. Internet activity | Page views, feature usage | Automatically from your use | GA4 (with consent); error monitor | No |
| G. Geolocation (sensitive PI) | Precise Vessel GPS | Gateway telemetry | Cloud / map sub-processors | No |
| K. Inferences | AI-derived vessel insights | Service-generated | AI sub-processor | No |
We do not knowingly collect personal information of California minors under 16 for purposes of sale or sharing. We have not sold or shared personal information in the preceding 12 months.
3. Sensitive Personal Information
We collect precise geolocation (Vessel GPS) and account credentials, which are sensitive personal information under CPRA. We use sensitive personal information only for the purposes permitted by CCPA Regulation § 7027, including providing the Service requested by you, security, and fraud prevention. We do not use sensitive personal information to infer characteristics about you.
4. Your Rights
- Right to know. Request the categories and specific pieces of personal information we have collected.
- Right to correct. Request correction of inaccurate personal information.
- Right to delete. Request deletion of personal information, subject to legal exceptions.
- Right to portability. Receive a copy of personal information in a portable format.
- Right to opt out of sale / sharing. We do not sell or share, so no opt-out action is required, but you may still submit a request.
- Right to limit use of sensitive PI. Request that we limit use to that necessary to provide the Service.
- Right to non-discrimination. We will not penalise you for exercising these rights.
- Right to appeal.Appeal a denied request by replying with “Appeal” in the subject line; we respond within 60 days.
5. How to Submit a Request
Email privacy@truebluehorizon.com with “California Privacy Request” in the subject line, or use the request form in your account settings. We will verify your identity using information already in your account. Authorised agents must provide written authorization; we may also verify directly with you.
We respond within 45 days, extendable by 45 days with notice. Good-faith requests are free.
6. Global Privacy Control
We treat the Global Privacy Control (GPC) signal as a valid opt-out of sale and sharing. Because we do not sell or share, this means GPC-signalling visitors will not have optional analytics cookies set.
7. Shine the Light
California Civil Code § 1798.83 permits California residents to request, once per year, information about personal information we have disclosed to third parties for direct marketing. We do not disclose personal information to third parties for their direct marketing.
8. Contact
True Blue Horizon, Inc., Fort Lauderdale, FL. privacy@truebluehorizon.com. California Department of Consumer Affairs, Division of Consumer Services, 1625 N. Market Blvd., Sacramento, CA 95834, (800) 952-5210.