CALIFORNIA NOTICE AT COLLECTION
CALIFORNIA NOTICE AT COLLECTION
Effective Date: September 13, 2026
Last Updated: September 13, 2026
This California Notice at Collection explains the categories of personal information that Doshe LLC (“DOSHE,” “we,” “us,” or “our”) may collect from California consumers, the purposes for which the information may be collected or used, applicable retention criteria, and information concerning sale or sharing.
This Notice supplements the DOSHE Privacy Policy.
Doshe LLC
United States
Email: info@doshe.store
Website: doshe.store
⸻
1. When This Notice Applies
This Notice is intended to provide California consumers with information at or before the point at which DOSHE collects personal information.
California Consumer Privacy Act rights described in this Notice apply where the CCPA applies to Doshe LLC and to the relevant processing.
Nothing in this Notice is intended to represent that Doshe LLC necessarily satisfies a particular statutory CCPA business threshold at all times.
DOSHE may nevertheless apply certain privacy protections more broadly as a matter of policy.
⸻
2. Categories of Personal Information We May Collect
A. Identifiers and Contact Information
Examples may include:
* name;
* username;
* email address;
* telephone number;
* postal address;
* city;
* ZIP or postal code;
* account identifiers;
* IP address.
Purposes:
* create and administer accounts;
* process orders;
* communicate with users;
* provide customer support;
* facilitate shipping;
* verify sellers;
* prevent fraud;
* maintain security;
* comply with legal obligations.
Retention:
For as long as reasonably necessary for the account, transaction, support, security, fraud-prevention, recordkeeping, or legal purpose for which the information was collected, subject to applicable law.
⸻
B. Account and Authentication Information
Examples may include:
* username;
* encrypted or hashed password information;
* authentication records;
* session information;
* account-security information.
Certain account credentials may constitute sensitive personal information under California law.
Purposes:
* authenticate users;
* protect accounts;
* prevent unauthorized access;
* maintain platform security.
Retention:
For the life of the relevant account and for an additional period where reasonably necessary for security, fraud prevention, dispute resolution, or legal compliance.
⸻
C. Commercial and Transaction Information
Examples may include:
* products viewed;
* products purchased or sold;
* order history;
* transaction amounts;
* refunds;
* cancellations;
* disputes;
* shipping status;
* store activity.
Purposes:
* process and administer transactions;
* provide buyer and seller functionality;
* calculate DOSHE fees;
* process refunds;
* handle disputes;
* prevent fraud;
* maintain accounting and legal records;
* improve the ecosystem.
Retention:
For as long as reasonably necessary for transaction administration, accounting, tax, fraud prevention, disputes, chargebacks, legal compliance, and enforcement of agreements.
⸻
D. Payment and Payout Information
Payments are currently processed through Stripe and Stripe Connect.
Depending on the transaction and account type, information may include:
* payment transaction identifiers;
* transaction status;
* payment amount;
* payout status;
* limited payment-related information;
* bank or payee information where applicable;
* Stripe account or connected-account identifiers.
Full payment-card credentials may be submitted directly to Stripe rather than stored directly by DOSHE.
Certain financial information may constitute sensitive personal information under California law.
Purposes:
* process payments;
* facilitate seller payouts;
* prevent payment fraud;
* process refunds and chargebacks;
* comply with financial and legal obligations.
Retention:
According to the period reasonably necessary for payment administration, fraud prevention, accounting, disputes, tax obligations, payment-provider requirements, and applicable law.
⸻
E. Seller Identity and Verification Information
Seller information may include:
* legal name;
* business name;
* date of birth where necessary;
* government-issued identification information;
* residential or business address;
* telephone number;
* email address;
* business registration information;
* authorized-representative information;
* verification status.
Some verification information may constitute sensitive personal information.
Purposes:
* verify seller identity;
* prevent fraud;
* comply with payment-provider requirements;
* comply with the INFORM Consumers Act where applicable;
* protect buyers;
* enforce DOSHE seller requirements.
Retention:
For as long as reasonably necessary to maintain seller verification, satisfy legal and compliance obligations, investigate fraud, preserve required records, and resolve disputes.
⸻
F. Tax Information
Examples may include, where required:
* EIN;
* taxpayer identification information;
* tax forms;
* tax status;
* VAT or similar identifiers.
Certain taxpayer information may constitute sensitive personal information.
Purposes:
* tax reporting;
* seller verification;
* statutory compliance;
* payment administration.
Retention:
For periods required by applicable tax, accounting, reporting, and recordkeeping laws and for reasonably necessary related compliance purposes.
⸻
G. Creator and Production Verification Information
DOSHE may collect:
* workshop photographs;
* process photographs or videos;
* production records;
* sketches;
* source files;
* information regarding tools and materials;
* Production Partner information;
* supplier or production documentation.
Purposes:
* verify creator authenticity;
* enforce handmade and originality standards;
* prevent deceptive resale;
* investigate compliance complaints.
Retention:
For as long as reasonably necessary for verification, account integrity, dispute resolution, fraud prevention, and policy enforcement.
⸻
H. Internet or Electronic Network Activity
Examples may include:
* IP address;
* browser type;
* device information;
* operating system;
* page interactions;
* login activity;
* session information;
* referral information;
* website activity;
* security events.
Purposes:
* operate the website;
* maintain security;
* detect fraud;
* troubleshoot;
* understand performance;
* maintain sessions;
* improve services;
* conduct permitted analytics.
Retention:
Based on the operational, security, analytics, fraud-prevention, and legal purpose for which the data is collected.
⸻
I. Approximate Location Information
DOSHE may infer approximate location from information such as:
* IP address;
* shipping address;
* billing or account location.
Purposes:
* provide localized functionality;
* calculate or facilitate shipping and taxes;
* prevent fraud;
* comply with legal restrictions;
* support security.
Retention:
For as long as reasonably necessary for the applicable transaction, account, security, fraud-prevention, or legal purpose.
DOSHE does not intend to collect precise geolocation through ordinary website use unless expressly disclosed at or before collection.
⸻
J. Communications
Examples may include:
* customer-support messages;
* buyer-seller messages;
* dispute communications;
* reports;
* inquiries;
* legal notices.
Purposes:
* provide support;
* facilitate transactions;
* resolve disputes;
* investigate safety or fraud concerns;
* enforce DOSHE policies;
* comply with law.
Retention:
For as long as reasonably necessary for support, dispute resolution, fraud prevention, safety, legal compliance, or enforcement.
⸻
K. User-Generated and Creator Content
Examples may include:
* listings;
* product photographs;
* videos;
* descriptions;
* store information;
* reviews;
* comments;
* seller responses;
* digital-product content.
Purposes:
* operate seller stores;
* display and promote products;
* provide search and discovery;
* translate content;
* facilitate reviews and community functionality;
* enforce DOSHE policies.
Retention:
Generally for as long as the content or account remains active and afterward where reasonably necessary for legitimate recordkeeping, disputes, legal obligations, safety, fraud prevention, or enforcement.
⸻
L. Preferences and Inferences
DOSHE may derive information relating to:
* product interests;
* language preferences;
* store interests;
* likely user preferences;
* fraud or security risk indicators.
Purposes:
* improve search;
* personalize relevant functionality;
* recommend products or stores;
* detect fraud;
* maintain security;
* improve the user experience.
Retention:
For as long as reasonably necessary for the relevant personalization, security, analytics, or service-improvement purpose.
⸻
M. Safety, Fraud and Compliance Information
Examples may include:
* product-safety complaints;
* counterfeit reports;
* intellectual-property reports;
* fraud indicators;
* suspicious-activity reports;
* compliance investigation information;
* sanctions-screening results where applicable.
Purposes:
* protect users;
* investigate misconduct;
* prevent fraud;
* address dangerous or prohibited products;
* comply with law;
* cooperate with competent authorities where legally required.
Retention:
For as long as reasonably necessary for safety, legal compliance, enforcement, fraud prevention, litigation, regulatory obligations, and related recordkeeping.
⸻
3. Sensitive Personal Information
Depending on the seller, user, transaction, and verification process, DOSHE may process categories of information that California law treats as sensitive personal information, including certain:
* account-login credentials;
* financial-account information;
* government identifiers;
* tax identifiers.
DOSHE intends to use sensitive personal information only for reasonably necessary and lawful purposes, including:
* authentication;
* payment processing;
* seller verification;
* fraud prevention;
* security;
* legal compliance;
* tax administration;
* providing requested services.
If DOSHE uses or discloses sensitive personal information in a manner that creates a California right to limit such processing, DOSHE will provide the required mechanism.
⸻
4. Sale of Personal Information
DOSHE does not sell personal information for monetary consideration as part of its ordinary business model.
California law may define a “sale” more broadly than an exchange of personal information for money.
Before this Notice is published as the live CCPA Notice at Collection, DOSHE will verify its actual vendors, cookies, analytics tools, integrations, and data flows to determine whether any activity constitutes a “sale” under California law.
If DOSHE engages in a legally defined sale of personal information, this Notice and the applicable privacy controls will be updated as required.
⸻
5. Sharing of Personal Information
California law defines “sharing” to include certain disclosures of personal information for cross-context behavioral advertising.
DOSHE does not operate a paid advertising program for sellers.
However, whether any website technology constitutes CCPA “sharing” depends on the actual technical configuration and third-party data flows.
DOSHE will maintain this Notice consistent with the technologies actually deployed on doshe.store.
If DOSHE shares personal information within the meaning of the CCPA, DOSHE will provide applicable:
* disclosure;
* opt-out rights;
* privacy controls;
* recognition of qualifying opt-out preference signals.
⸻
6. No Use for Undisclosed Incompatible Purposes
DOSHE will not collect additional categories of personal information or materially use collected personal information for an incompatible additional purpose without providing additional notice where required by law.
⸻
7. Data Minimization and Proportionality
Where applicable, DOSHE seeks to collect, use, retain, and share personal information only to the extent reasonably necessary and proportionate for the disclosed purposes.
⸻
8. Retention
DOSHE does not retain personal information indefinitely merely because it was collected.
Retention is determined by factors including:
* whether the user maintains an account;
* transaction requirements;
* contractual obligations;
* tax and accounting requirements;
* fraud-prevention needs;
* payment-provider requirements;
* product-safety obligations;
* dispute or litigation requirements;
* legal obligations;
* applicable limitation periods.
Information will not knowingly be retained longer than reasonably necessary for the applicable disclosed purposes unless another lawful basis requires or permits continued retention.
⸻
9. California Privacy Rights
Where the CCPA applies, California consumers may have rights including:
* the right to know;
* the right to access;
* the right to delete;
* the right to correct inaccurate personal information;
* the right to opt out of sale or sharing;
* the right to limit certain uses or disclosures of sensitive personal information;
* the right not to receive discriminatory treatment for exercising applicable CCPA rights.
These rights are subject to statutory exceptions and verification requirements.
⸻
10. Global Privacy Control
Where Doshe LLC is legally required to honor an opt-out preference signal, DOSHE will process a qualifying Global Privacy Control (GPC) signal in accordance with applicable California law.
⸻
11. Children Under 16
DOSHE does not intend to knowingly sell or share personal information of consumers under 16 in circumstances requiring California opt-in authorization.
Seller accounts are intended for persons with the legal capacity required under DOSHE policies.
⸻
12. Stripe
Payment information may be processed by Stripe.
Stripe may act in different legal capacities depending on the particular payment or service activity.
Users should also review applicable Stripe privacy disclosures for Stripe’s independent processing activities.
⸻
13. Third-Party Service Providers
DOSHE may disclose personal information to appropriate service providers, contractors, payment providers, security providers, hosting providers, professional advisers, or other parties where reasonably necessary for disclosed business purposes and permitted by law.
Such disclosures are not automatically a “sale” or “sharing” under the CCPA.
⸻
14. Government and Legal Disclosures
DOSHE may disclose information where reasonably necessary and legally permitted or required to:
* comply with law;
* respond to valid legal process;
* protect safety;
* investigate fraud;
* protect legal rights;
* cooperate with competent authorities.
⸻
15. Privacy Policy
The DOSHE Privacy Policy provides additional information regarding:
* sources of personal information;
* purposes of processing;
* disclosure practices;
* privacy rights;
* international transfers;
* security;
* California rights;
* contact information.
The Privacy Policy should be linked directly from this Notice.
⸻
16. Privacy Requests
Where applicable California privacy rights are available, requests may be submitted through the methods identified in the DOSHE Privacy Policy.
Until a dedicated privacy contact or request portal is established, privacy inquiries may be sent to:
info@doshe.store
DOSHE may require reasonable verification before fulfilling certain requests.
⸻
17. Non-Discrimination
Where California law applies, DOSHE will not unlawfully discriminate against a consumer for exercising applicable CCPA rights.
⸻
18. Changes to This Notice
DOSHE may update this Notice when:
* categories of information change;
* purposes change;
* vendors change;
* website technologies change;
* legal requirements change;
* sale or sharing status changes.
Where required, an updated Notice will be provided at or before the collection of information for a materially new purpose.
⸻
19. Contact
Doshe LLC
7689 Palmilla Dr
San Diego, CA 92122
United States
Email: info@doshe.store
Website: doshe.store
⸻
20. Website Implementation
Where this Notice is required, DOSHE should make it readily available at or before relevant collection points.
Examples include:
* registration forms;
* checkout;
* seller onboarding;
* contact forms;
* seller-verification forms;
* pages collecting personal information.
A conspicuous link may be labeled:
California Notice at Collection
The Notice must not be placed only in a location consumers are unlikely to encounter before providing their information.
⸻
21. Technical Verification Before Publication
Before this Notice is treated as the operative California Notice at Collection, Doshe LLC must verify the actual technical environment of doshe.store, including:
* cookies;
* pixels;
* analytics;
* third-party scripts;
* embedded services;
* tag-management tools;
* advertising or retargeting technologies;
* other data transfers.
The resulting determination must be used to state accurately whether each relevant category of personal information is sold or shared within the meaning of California law.
DOSHE will not knowingly publish a false “we do not sell or share” representation without confirming the underlying data flows.