Privacy Notice for California Residents

Effective Date: July 23, 2026
Last Updated: July 23, 2026

1. Introduction

This Privacy Notice for California Residents (the "Notice") supplements the information contained in our general Privacy Policy, available at https://qcodemedia.com/privacy-policy, and applies solely to visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this Notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the "CCPA"). Any terms defined in the CCPA have the same meaning when used in this Notice.

For purposes of this Notice, "we," "us," "our," and "the Company" refer to QCODE Media, Inc. We operate qcodemedia.com, a website that displays our catalogue of content and also offers an email newsletter.

2. Personal Information We Collect

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device, or household ("personal information"). Personal information does not include:

  • Publicly available information from government records, or information that you have made publicly available;

  • Deidentified or aggregated consumer information; or

  • Information excluded from the CCPA's scope, such as information covered by HIPAA/CMIA, the Gramm-Leach-Bliley Act, the Fair Credit Reporting Act, or the Driver's Privacy Protection Act.

2.1 Categories of Personal Information Collected

The chart below identifies the categories of personal information we have collected from consumers in the preceding twelve (12) months.

Category

Examples

Collected?

Retention Period

A. Identifiers

IP address, device and cookie identifiers, email address (for newsletter subscribers), name (if voluntarily provided at signup).

YES

Newsletter email and name: retained while your subscription is active and for 6 months after unsubscribe for suppression-list purposes. Cookie, device, and analytics identifiers: per service-provider defaults (e.g., Google Analytics 14 months by default). Server logs: 12 months.

B. California Customer Records (Cal. Civ. Code § 1798.80(e))

Name and email address voluntarily provided at newsletter signup. We do NOT collect Social Security numbers, driver's license or state ID numbers, passport numbers, financial account information, medical information, or health insurance information. Overlaps with Category A.

YES

Same as Category A.

C. Protected Classification Characteristics

Age (40+), race, color, ancestry, national origin, citizenship, religion, marital status, medical condition, disability, sex, sexual orientation, military/veteran status, genetic information.

NO

N/A

D. Commercial Information

Records of personal property, products or services purchased, or purchasing histories. We do not sell products or services directly to consumers.

NO

N/A

E. Biometric Information

Fingerprints, faceprints, voiceprints, iris/retina scans, keystroke, gait patterns.

NO

N/A

F. Internet or Other Similar Network Activity

Browsing activity on qcodemedia.com, pages viewed, referring URLs, clicks, and interaction data collected via cookies, pixels, and similar technologies, including clicks on affiliate links.

YES

Google Analytics data: per retention setting (default 14 months, configurable). Affiliate link click data: per affiliate partner (Apple Podcasts, Amazon Music, Linkfire) retention policies,

Squarespace Analytics data: device type, OS, browser identifier, referring URL.

G. Geolocation Data

General geographic location (city/region level) inferred from IP address. We do NOT collect precise geolocation (GPS-level data within approximately 1,850 feet).

YES

Same as Category F (general geographic location only).

H. Sensory Data

Audio, electronic, visual, thermal, olfactory, or similar information.

NO

N/A

I. Professional or Employment-Related Information

Current or past job history.

NO

N/A

J. Non-Public Education Information (FERPA)

Education records maintained by an educational institution.

NO

N/A

K. Inferences

Inferences drawn about audience interests or preferences for content and analytics purposes, generated by our analytics service providers.

YES

Per service-provider retention policies.

L. Sensitive Personal Information

See detail below. We do NOT collect sensitive personal information as defined by the CCPA.

NO

N/A

2.2 Sensitive Personal Information

We do not collect any categories of sensitive personal information as defined by the CCPA. The chart below reflects this:

Sensitive Personal Information Category

Collected to Infer Characteristics?

L.1. Government identifiers (SSN, driver's license, state ID, passport number)

NO

L.2. Complete account access credentials (usernames combined with passwords or security codes)

NO

L.3. Precise geolocation (GPS-level data within ~1,850 feet)

NO

L.4. Racial or ethnic origin

NO

L.5. Citizenship or immigration status

NO

L.6. Religious or philosophical beliefs

NO

L.7. Union membership

NO

L.8. Mail, email, or text messages not directed to the Company

NO

L.9. Genetic data

NO

L.10. Neural data

NO

L.11. Unique identifying biometric information

NO

L.12. Health information

NO

L.13. Sex life or sexual orientation information

NO

L.14. Children's personal information (under age 16)

NO

3. Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources:

  • Directly from you — for example, when you subscribe to our newsletter, contact us by email, or otherwise voluntarily provide information.
  • Automatically from your device and browser — through cookies, pixel tags, log files, local storage, and similar technologies when you visit qcodemedia.com.
  • From our service providers — including our website hosting provider, our newsletter email service provider Squarespace, our business email service provider GMail.
  • From our affiliate partners — including Apple Podcasts, Amazon Music, and Linkfire — which may provide aggregated or click-level performance and commission information in connection with affiliate links on our site.

4. How We Use Personal Information

We may use the personal information we collect for the following business and commercial purposes:

  • Operating qcodemedia.com;
  • Sending our newsletter to subscribers who have opted in, and managing subscription preferences (including unsubscribe requests) via the unsubscribe link in each newsletter or by sending an email to info@qcodemedia.com;
  • Measuring and analyzing website traffic, audience engagement, and site performance;
  • Providing and measuring the performance of affiliate links to Apple Podcasts, Amazon Music, and Linkfire link trees;
  • Responding to consumer inquiries, requests, and exercise of privacy rights;
  • Detecting, investigating, and preventing security incidents, fraud, and misuse of the Services;
  • Complying with applicable laws and legal processes, and exercising or defending our legal rights; and
  • Supporting corporate transactions, including evaluating potential mergers, acquisitions, financings, or reorganizations involving the Company.

We will not collect additional categories of personal information, or use the personal information we collected for materially different, unrelated, or incompatible purposes, without providing you notice. Where required by law, we will also obtain your consent.

5. Disclosing, Selling, and Sharing Personal Information

5.1 Business-Purpose Disclosures to Service Providers and Contractors

We disclose personal information to the following categories of service providers and contractors for the business purposes described in Section 4. These disclosures are made pursuant to written contracts that prohibit the recipients from using personal information for any purpose other than performing the contract, as required by the CCPA.

Category of Service Provider / Contractor

Personal Information Categories Disclosed

Business Purpose

Website hosting and infrastructure providers

A, F, G

To host, operate, secure, and maintain qcodemedia.com.

Squarespace (newsletter email service provider)

A, B (name and email), F (email engagement data — opens, clicks)

To manage the newsletter subscriber list, deliver newsletters, and measure newsletter engagement.

GMail — business email service provider

A, B (name and email of correspondents), plus any personal information a consumer includes in the body of an email sent to us (we do not solicit sensitive personal information through this channel and process any incidental receipt only to respond to the inquiry)

To host the inbox for info@qcodemedia.com, receive and respond to consumer inquiries and privacy-rights requests, and handle business email.

Web analytics providers (Squarespace)

A, F, G, K

To measure site traffic, engagement, and performance.

Professional advisors (legal, accounting, compliance)

As needed

To obtain legal, accounting, and compliance services.

Affiliated entities within the QCODE Media, Inc. corporate family

As needed

For shared administrative, operational, and compliance support.

5.2 Sales and Sharing of Personal Information

Our use of certain third-party technologies may constitute "selling" or "sharing" personal information, as those terms are defined under the CCPA. This may occur through:

  • Affiliate links. When you click an affiliate link on our site, you are directed to a third-party affiliate partner (Apple Podcasts or Amazon Music) or a Linkfire link tree, which may set cookies or collect identifiers under its own privacy policy. Depending on configuration, this activity may also constitute a "share" under the CCPA.

We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age. We do not sell or share sensitive personal information.

In the preceding twelve (12) months, we have disclosed the following categories of personal information to the following categories of third parties for purposes that may constitute "selling" or "sharing" under the CCPA:

Category of Third Party

Personal Information Sold / Shared

Commercial or Business Purpose

Google (Google Analytics, and Google advertising products if enabled)

A, F, G, K

Website analytics and, to the extent enabled, advertising-related measurement. Depending on configuration, this may constitute a "sale" or "share" under the CCPA.

Affiliate partners (Apple Podcasts, Amazon Music) and Linkfire link-tree services

A (IP address, device and cookie identifiers collected when you click an affiliate link)

To operate affiliate links and link trees and measure their performance. Depending on configuration, this may constitute a "share" under the CCPA.

6. Your Rights Under the CCPA

If you are a California resident, you have the following rights regarding your personal information:

6.1 Right to Know and Data Portability

You have the right to request that we disclose information about our collection, use, disclosure, sale, and sharing of your personal information over the preceding 12 months, including the specific pieces of personal information we have collected about you. You may exercise this right up to twice in any 12-month period.

6.2 Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (for example, where retention is necessary to complete a transaction, comply with a legal obligation, or detect security incidents).

6.3 Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

6.4 Right to Opt-Out of Sale and Sharing

You have the right to direct us to stop selling and sharing your personal information. Because we collect personal information from you online and do not sell or share personal information offline, we offer the following method for submitting an opt-out request:

Email. You may email us at info@qcodemedia.com with the subject line "Do Not Sell or Share My Personal Information."

We do not require you to create an account or to verify your identity in order to submit an opt-out request, although we may ask for information necessary to apply the opt-out to the correct records. We will display on our website whether your opt-out request has been processed.

6.5 Right to Limit Use of Sensitive Personal Information

We do not collect sensitive personal information as defined by the CCPA. To the extent we incidentally receive personal information that could be characterized as sensitive (for example, in the body of a consumer email sent to us), we use and disclose it only for the purposes permitted under 11 CCR § 7027(m). Accordingly, we are not required to provide, and do not currently offer, a separate "right to limit" mechanism. If this changes, we will update this Notice and make a limitation mechanism available.

6.6 Automated Decision-Making Technology (ADMT)

We do not use automated decision-making technology to make significant decisions about consumers, as those terms are defined under applicable California regulations. Accordingly, the ADMT access, opt-out, and appeal rights under those regulations do not currently apply to our processing.

6.7 Right to Non-Discrimination

We will not discriminate or retaliate against you for exercising any of your CCPA rights.

7. How to Exercise Your Rights

7.1 Submitting a Request

To submit a request to know, delete, or correct your personal information, you or your authorized agent may contact us using the following methods:

  • Email: info@qcodemedia.com
  • Mail: QCODE Media, Inc., 3130 Wilshire Blvd., Suite 600, Santa Monica, CA 90403

Please describe your request with sufficient detail so that we can properly understand, evaluate, and respond. You or your authorized agent may submit a request to know, including for data portability, up to twice in any 12-month period.

7.2 Submitting an Opt-Out or Limitation Request

To opt-out of the sale or sharing of your personal information, use one of the methods listed in Section 6.4.

7.3 Verification

We will take reasonable steps to verify your identity before responding to a verifiable consumer request. For newsletter subscribers, we will generally verify requests by confirming the email address associated with the subscription. For other requests, we may ask for additional information to match against information we hold. We will only use personal information provided in a request to verify the requester's identity or authority to make the request.

7.4 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We will require the agent to provide written, signed authorization from you, and we may require you to verify your identity directly with us or confirm that you have provided the agent permission to submit the request.

7.5 Response Timing

Within 10 business days after we receive your request to know, delete, or correct, we will confirm receipt of the request and describe, in general terms, our verification process and when you should expect a substantive response. We will respond substantively within 45 calendar days of receipt. If we require additional time (up to another 45 days), we will notify you in writing of the reason and extension period. Any disclosures we provide will cover the 12-month period preceding our receipt of the request, except for requests to know where a longer period is specifically requested and providing it would not be impossible or require disproportionate effort.

For requests to opt-out of the sale or sharing of personal information, we will process your request as soon as feasibly possible and no later than 15 business days after we receive the request. We will notify the third parties to whom we have sold or shared your personal information in the preceding 90 days that you have opted out, and direct them to comply with your request.

We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

8. Children Under 16

Our website is not directed to children, and we do not knowingly sell or share the personal information of consumers under 16 years of age. If we learn that we have collected personal information from a consumer under 16 in a manner that would require opt-in consent under the CCPA, we will take steps to address it, including by deleting the information or ceasing to sell or share it as appropriate. If you believe a child has provided us with personal information, please contact us at info@qcodemedia.com.

9. How We Protect Your Personal Information

We use commercially reasonable administrative, physical, and technical measures designed to protect personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. However, no website or online service is completely secure, and we cannot guarantee the security of personal information transmitted to or through our site. Any transmission is at your own risk, and you are responsible for taking reasonable steps to protect your personal information.

10. Changes to This Privacy Notice

We reserve the right to update this Privacy Notice from time to time. When we make material changes, we will update the "Last Updated" date above and post the revised Notice on our website. We encourage you to review this Notice periodically.

11. Contact Information

If you have questions or comments about this Privacy Notice, the ways in which we collect and use your personal information, or your rights and choices regarding such use, please contact us at:

QCODE Media, Inc.
Email: info@qcodemedia.com
Mail: 3130 Wilshire Blvd., Suite 600, Santa Monica, CA 90403

If you need to access this Privacy Notice in an alternative format due to a disability, please contact info@qcodemedia.com.