Effective Date: January 1, 2025

CCA Innovations OU controls your personal data on behalf of Casey Potenzone (“our”, “we” or “us”).

This Data Protection and Privacy Policy (“Policy”) explains what personal data we collect from you, how we use it, with whom it may be shared, and your rights and choices regarding our use of your data. This Policy is designed to comply with applicable laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), to protect the privacy rights of California residents.

If you have any questions about this Policy, our data practices, or if you wish to exercise your privacy rights, please contact us using the details below:

120 Vantis
Suite 300
Aliso Viejo
California, USA

Email: support@nofriction.io

Our Data Protection Officer is available at the above contact details.

We encourage you to read this Policy carefully when using our website or mobile applications (“Sites”) or when engaging with our services. In the event of any inconsistency between translations of this Policy, the English version shall prevail.

We may collect personal data that you voluntarily provide to us through forms on our website, including but not limited to:

• Contact Information: Email address, first and last name, telephone numbers, and physical address.

• Personal Details: Date of birth.

• Visual Data: Images (both still and moving).

• Payment Information: When you purchase a product or service, we collect billing details such as credit card information and billing address or bank details.

When you access our Sites, we may automatically collect certain usage data, including:

• Your IP address

• Browser type and version

• Web pages visited and the time/date of your visit

• Time spent on the pages

• Unique device identifiers

• Cookie data (see below)

• Other diagnostic data

With your consent, we may use “Cookies” to enhance your experience on our Sites. Cookies help us collect information regarding your online activity, such as pages visited, links clicked, and time spent on our Sites. Withdrawing your consent for cookies may limit your ability to access certain features of our Sites.

We may employ additional technologies like web beacons to monitor your use of our Sites and assess the effectiveness of our communications (e.g., determining if an email has been opened). This helps us improve our services and offer personalized content.

We may augment the data collected directly from you with information from third parties, such as updated delivery or address details from carriers, account or purchase data from our partners, and search-related data from online queries.

We process your personal data for several purposes, including:

• Managing your account and providing customer support.

• Facilitating user functionality on our Sites.

• Processing payments for products, subscriptions, or services.

• Detecting and preventing fraudulent transactions.

• Conducting research and analysis to improve our products, services, and marketing efforts.

• Offering tailored promotions and cross-marketing our services and those of our partners.

• Verifying eligibility for contests, sweepstakes, and other offers.

• Protecting the rights and property of CCA Innovations OU.

With your consent, we may:

• Share your email and other data with trusted business partners for promotional offers.

• Send you newsletters, email notifications, and SMS messages.

• Use cookies to personalize your experience on our Sites.

We may process your personal data when required to:

• Exercise or defend our legal rights.

• Protect the vital interests of our users or the public.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations.

We may share your personal data with:

Trusted third-party service providers who perform functions on our behalf (e.g., payment processing, customer support, marketing analytics). These providers receive only the data necessary to perform their services and are contractually obligated to protect it.

Companies we collaborate with to offer products, services, promotions, contests, or sweepstakes.

We may disclose your personal data when:

• Required by law (e.g., via subpoena, court order).

• Necessary to protect our legal rights or those of our users.

• In connection with corporate transactions such as mergers or asset sales (in which event the acquiring entity will be bound by this Policy).

Our Sites may include links to third-party websites not governed by this Policy. We are not responsible for the privacy practices of these sites. We encourage you to review the privacy policies of any third-party sites you visit.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: The right to request a copy of your personal data.

• Rectification: The right to have inaccurate or incomplete data corrected.

• Erasure: The right to request deletion of your data, subject to legal exceptions.

• Objection: The right to object to data processing based on our legitimate interests.

• Direct Marketing: The right to opt-out of direct marketing communications.

• Data Portability: The right to receive your data in a structured, commonly used, and machine-readable format.

• Restriction: The right to restrict the processing of your data under certain circumstances.

If you are a California resident, you have additional rights under the CCPA/CPRA, including:

• Right to Know: Request details about the personal information we collect, use, share, or sell.

• Right to Deletion: Request the deletion of your personal data, subject to specific exceptions.

• Right to Opt-Out: Instruct us not to sell your personal data (if applicable). Please visit our “Do Not Sell My Personal Information” page if available.

• Non-Discrimination: Assurance that you will not be discriminated against for exercising your privacy rights.

To exercise these rights, please contact us using the information provided above.

We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that your child’s personal data has been collected without consent, please contact us immediately.

Your personal data may be transferred to and stored on computers located outside your state or country where data protection laws may differ from those in your jurisdiction. By providing us with your personal data, you consent to these transfers.

We may update this Policy from time to time to reflect changes in our practices or legal requirements. When we post changes, we will update the “Effective Date” at the top of this Policy and notify you as required by law. We encourage you to review this Policy periodically.