SameDayTshirts (“SameDayTshirts,” “we,” “us,” and “our”) provides this California Privacy Notice and Notice at Collection to residents of California. It supplements our general Privacy Policy and explains categories of personal information we collect, purposes and recipients, sale or sharing under California law, applicable rights, and how to exercise those rights. Our services include online custom-printing, artwork and saved-design tools, quotations, order fulfillment, support, marketing, and partner/vendor operations.

This notice reflects the current practice of email-based saved-design retrieval, described in Section 7A. It does not substitute for legally required security safeguards, other notices at collection, contractual restrictions, or operational privacy-choice controls.

Capitalized terms carry the meanings provided by the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and implementing regulations, where applicable. The scope and availability of rights depend on California law and relevant exemptions.

1. Scope of This Notice

This California Privacy Notice applies only to California residents. It supplements and should be read together with our general Privacy Policy, Terms & Conditions, Return & Refund Policy, and any other notice provided at or before the point of collection.

This notice applies to personal information collected through or in connection with:

• Our website and related online services.
• Customer accounts.
• Product browsing and checkout.
• The SameDayTshirts design studio.
• Uploaded artwork, images, logos, text, design files, mockups, proofs, and custom order instructions.
• Customer support channels, including calls, chats, SMS, emails, forms, and support tickets.
• Sales communications and quote requests.
• Order processing, production, pickup, local delivery, courier delivery, and shipping.
• Payment processing through third-party payment processors.
• Refunds, reprints, claims, disputes, chargebacks, fraud prevention, and quality control.
• Marketing, advertising, analytics, retargeting, attribution, and conversion tracking.
• Vendor, business partner, contractor, applicant, and business customer interactions, where applicable.

2. Important Definitions

For purposes of this California Privacy Notice, terms such as “personal information,” “sensitive personal information,” “sale,” “sell,” “share,” “sharing,” “service provider,” “contractor,” “third party,” “business purpose,” “commercial purpose,” and “consumer” have the meanings given to them under the CCPA/CPRA and applicable regulations.

Personal information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.

Sensitive personal information means certain categories of personal information defined by California law, which may include account login credentials, financial account information with required access credentials, precise geolocation, contents of certain communications, government identifiers, racial or ethnic origin, religious or philosophical beliefs, union membership, genetic data, biometric information used for identification, health information, sex life, sexual orientation, and other legally defined sensitive categories.

Sale or selling may include disclosing personal information to a third party for monetary or other valuable consideration.

Share or sharing means disclosing personal information to a third party for cross-context behavioral advertising, whether or not money is exchanged.

Service provider or contractor means an entity that processes personal information on our behalf under a contract that limits how the information may be used.

Third party means a recipient of personal information that is not acting as our service provider or contractor and is not otherwise excluded from the definition under California law.

Personal information does not include information excluded from the CCPA/CPRA, such as publicly available information from government records, lawfully obtained publicly available information, deidentified information, aggregated information, and certain information subject to other laws.

3. Notice at Collection

The following is a category-based summary. Depending on how you use the services, not every example applies to you. Retention descriptions are criteria, not uniform fixed durations.

* Potential “sharing” (cross-context behavioral advertising) or “sale” for nonmonetary value depends on actual vendors/contracts and requires verification. No customer information is exchanged for money as a data-sale business model. See Section 10.

The artwork/images category includes saved designs. Under the current retrieval feature, designs associated with an entered email address can be viewed without confirming ownership of that email account; this is described separately in Section 7A. That access is not an intended sale, commercial “sharing,” or authorization to retrieve another person’s designs.

4. Categories of Sources

We may collect personal information from the following categories of sources:

• Directly from you, such as when you create an account, place an order, upload artwork, use the design studio, request a quote, contact support, sign up for marketing, submit a form, or communicate with our sales team.
• Automatically from your browser or device, such as through cookies, pixels, log files, analytics tools, advertising tools, session replay tools, and similar technologies.
• From payment processors, fraud prevention tools, banks, and chargeback processors.
• From print providers, fulfillment centers, decorators, local vendors, shipping carriers, couriers, logistics providers, and delivery platforms.
• From customer support, CRM, chat, SMS, phone, email, AI, and ticketing providers.
• From advertising networks, analytics providers, social media platforms, marketing technology providers, and attribution tools.
• From business customers, vendors, contractors, partners, affiliates, and professional contacts.
• From publicly available sources, where permitted by law.
• From legal, compliance, security, and fraud prevention sources.

5. Purposes for Collection, Use, and Disclosure

We may collect, use, retain, and disclose personal information for the following business and commercial purposes:

• To operate the SameDayTshirts website, checkout, design studio, customer support channels, and order management systems.
• To create, maintain, personalize, and secure customer accounts.
• To process quotes, orders, payments, refunds, disputes, chargebacks, and reprints.
• To review uploaded artwork, images, logos, text, designs, proofs, mockups, and special instructions.
• To provide design assistance, design review, mockups, proofs, and customer support.
• To print, produce, customize, package, fulfill, ship, deliver, or make orders available for pickup.
• To assign orders to print providers, fulfillment centers, decorators, local vendors, shipping carriers, local delivery providers, couriers, and logistics platforms.
• To provide order confirmations, status updates, pickup notifications, shipping notifications, delivery updates, customer support responses, and operational communications.
• To verify identity, process payments, detect fraud, prevent unauthorized transactions, and protect against abuse.
• To improve our website, design studio, checkout flow, product offerings, operations, fulfillment network, support quality, and customer experience.
• To conduct analytics, reporting, testing, research, product development, quality control, and business planning.
• To conduct marketing, advertising, retargeting, conversion tracking, audience measurement, attribution, and promotional communications, where permitted by law.
• To use AI tools, automation tools, and similar technologies to support customer service, internal operations, quality assurance, ticket review, analytics, design support, fraud prevention, workflow automation, and business efficiency.
• To maintain business, tax, accounting, operational, quality control, training, and legal records.
• To manage vendors, service providers, contractors, fulfillment partners, business customers, and professional relationships.
• To investigate, establish, exercise, or defend legal claims.
• To comply with applicable laws, court orders, subpoenas, regulatory obligations, tax obligations, law enforcement requests, and legal processes.
• To protect the rights, property, safety, security, and integrity of SameDayTshirts, our customers, our vendors, our service providers, and others.
• To evaluate or complete a merger, acquisition, financing, investment, reorganization, bankruptcy, sale, transfer, or other business transaction involving all or part of our business or assets.
• For any other purpose disclosed to you at or before the time of collection, or as otherwise permitted by law.

We will not collect additional categories of personal information or use personal information for materially different, unrelated, or incompatible purposes without providing notice where required by law.

6. Third-Party Services, Contractors, and Technology Providers

SameDayTshirts uses independent print shops, fulfillment centers, decorators, local stores, shipping and delivery providers, technology providers, and professional service providers to operate its custom-printing marketplace. These recipients receive information needed for their roles. Their classification as a service provider, contractor, or third party under California law depends on their actual functions and contract terms; a label in this notice does not alter that classification.

• Production and design: local printers, fulfillment centers, decorators, contractors, designers, proofing and file-processing vendors, and quality-control providers.
• Logistics: shipping carriers, couriers, local delivery services, logistics platforms, pickup operators, return and claims providers.
• Transactions: payment processors, banks, digital wallets, financing providers when offered at checkout, fraud-screening services, chargeback administrators, and accounting providers.
• Customer relationships: support, CRM, ticketing, email, SMS, telephone, chat, survey and review providers, including approved AI-assisted systems.
• Technology and measurement: hosting, cloud storage, security, design software, analytics, heatmaps and session replay (if enabled), pixels, advertising, retargeting, conversion measurement, marketing and attribution providers.
• Legal and corporate matters: legal, tax, audit, insurance and compliance advisers; affiliates and prospective or actual investors, buyers, lenders, successors, or transaction counterparties; and courts or government authorities as permitted or required by law.

We disclose information to fulfill orders, provide requested services, operate and protect our business, and for other purposes described in this notice. We seek contracts with service providers and contractors that impose the restrictions required under applicable law. Third parties acting independently may maintain their own privacy notices. Information disclosed to fulfill an order may include contact details, shipping details, artwork, mockups, printing instructions, order status, and communications reasonably relevant to the service.

Our general Privacy Policy contains additional explanations. Vendor identities may change; this notice generally uses recipient categories rather than a list of individual vendors.

7. Payment Information

Customers generally enter full payment-card credentials through third-party payment processors or checkout components. SameDayTshirts does not intentionally store full card numbers, CVV codes, or complete payment account credentials in its own business databases. We may receive partial card identifiers, payment-method type, payment status, transaction/reference IDs, billing details, fraud signals, refunds, disputes, chargebacks, and records needed for accounting or compliance.

Financing or installment options, if presented at checkout, are provided under the independent provider’s terms and applicable privacy practices. We use transaction information to provide services, prevent misuse, manage disputes, and comply with law.

7A. Saved Designs: Current Access and Visibility

The current saved-design retrieval feature is separate from customer-account sign-in. Entering an email address associated with saved designs can allow a person to view the designs stored under that address without signing into that account, receiving an emailed verification link, proving control of the email inbox, or completing the one-time password (OTP) verification used for account login. Therefore, a person who knows another customer’s email address may be able to view that customer’s saved designs. This behavior should be considered before submitting or saving artwork.

Saved designs may contain uploaded images, logos, company artwork, photographs, personal names, text, mockups, and other content, including sensitive or confidential information a customer voluntarily includes. Do not assume that saved artwork can be viewed only by you or by persons who have verified account or email ownership. The ability to access a retrieval screen does not authorize a person to access, use, download, reproduce, edit, disclose, or distribute someone else’s designs.

SameDayTshirts personnel, authorized designers, contractors, print shops, and technology providers may also need to access uploaded content for design support, printing, fulfillment, quality assurance, reprints, customer support, dispute handling, security, or legal compliance. These operational disclosures differ from access through the customer-facing email-based retrieval feature.

We recommend that customers refrain from storing highly confidential materials, private photographs, credentials, financial data, nonpublic business designs, medical details, information about children, or other sensitive personal information through saved-design functions unless necessary after considering the visibility described above. Customers must ensure they have legal rights and consents necessary for content they submit. These customer considerations do not remove any legal duties that SameDayTshirts has to protect personal information.

We may process email addresses submitted for retrieval, design identifiers, associated order or support information, and technical or security records if available to provide the feature, investigate reported misuse, and respond to requests. Whether viewing also enables downloading, editing, copying, or deleting content is feature-dependent and has not been verified for this notice; no representation is made that such activities are or are not possible.

For help with design access, a suspected privacy issue, or a request concerning a saved design, email info@samedaytshirts.com with the design/email or order reference and a description of the concern. We may ask you to verify your relationship to the design before disclosing personal information or responding to a privacy-rights request. We will review requests and incidents in accordance with applicable law, including lawful retention and rights of third parties.

This statement describes a presently known functionality; it does not create a license to access someone else’s content, obtain consent on that person’s behalf, waive statutory privacy rights, or relieve SameDayTshirts of obligations that applicable law imposes.

8. Calls, Chats, SMS, Emails, and Support Communications

When you contact us through email, chat, SMS, telephone, social media, forms, support tickets, or related services, we may process the content, contact details, timestamps, metadata, and relevant order/design information. Communications may be recorded, transcribed, summarized, monitored, reviewed, or analyzed through employees, contractors, or approved service providers for service delivery, training, quality assurance, fraud prevention, dispute resolution, documentation, security, and other lawful business purposes.

We provide recording and consent notices and obtain any consent required by applicable law, including where California call-recording laws apply.

Service-related email, text, or phone notifications may include order, design approval, production, delivery, pickup, account, or security updates. Promotional email, SMS, and other marketing communications are subject to applicable consent and opt-out rules. Unsubscribing from promotional messages does not necessarily stop communications reasonably necessary for active orders or requested services.

9. AI Tools and Automation

We may use AI-assisted tools and workflow automation in customer support, ticket classification, call or message summarization, design assistance, quality assurance, fraud review, order routing, operational forecasting, and analytics. Such systems may process contact, order, support, artwork, or operational information to provide their functions, subject to applicable confidentiality and privacy obligations.

Automated decisionmaking technology can have specific meanings and obligations under California law. We do not represent that every software automation is covered by those rules.

Where required by law, we will provide disclosures and honor applicable privacy rights concerning covered automated decisionmaking uses. We may use human review when appropriate and available under our operational procedures.

10. Your Privacy Choices / Do Not Sell or Share My Personal Information

SameDayTshirts does not sell personal information for money. California law can nevertheless classify some transfers as a “sale” when other valuable consideration is exchanged, or as “sharing” when personal information is disclosed for cross-context behavioral advertising, even when no payment is involved.

Our advertising, analytics, attribution, retargeting, audience-matching, and cookie or pixel technologies may disclose online identifiers, internet activity, commercial information, approximate location, or related inferences to third parties. Depending on contracts and configuration, these disclosures may constitute a sale or sharing under the CCPA.

California residents may exercise applicable privacy rights, including requesting to opt out of the sale or sharing of their personal information, by contacting us at info@samedaytshirts.com. Please specify the privacy right you wish to exercise. We will review and process requests in accordance with applicable law. Where a separate website opt-out method is required by law, that mechanism must also be provided.

An opt-out of sale or sharing does not prevent us from sharing information with service providers and contractors for purposes allowed by law, including printing, fulfillment, shipping, payment processing, service communications, fraud prevention, security, accounting, support, and legal compliance. Opt-out requests will be implemented without improper identity-verification barriers as applicable. We do not knowingly sell or share the personal information of consumers under age 16 without legally valid authorization.

11. Global Privacy Control and Opt-Out Preference Signals

California law requires covered businesses engaged in sale or sharing to recognize qualifying opt-out preference signals, including Global Privacy Control (GPC), as opt-out requests under applicable rules. Such signals can be associated with the browser or device sending them; other steps may be needed to communicate preferences across multiple browsers or devices.

You may also contact info@samedaytshirts.com to submit an opt-out request or use the website choice mechanism if and when implemented. We will not require unnecessary personal information for processing an opt-out request.

12. Sensitive Personal Information

Sensitive personal information, as defined by California law, may arise through account credentials, qualifying financial-access information, the contents of communications where covered, or data that a customer voluntarily includes in uploaded artwork, images, design instructions, messages, or support materials. Certain government identifiers, health information, photographs, or other sensitive details might also be supplied in specific vendor, employment, fraud, or compliance contexts.

We ask customers not to upload sensitive personal information, confidential documents, identification numbers, health records, payment credentials, private images, or sensitive data about children or third parties unless genuinely required for a requested service and legally authorized. Uploaded artwork and saved designs must not be treated as a confidential personal-data vault; Section 7A explains the current saved-design retrieval behavior.

We seek to use or disclose sensitive personal information for legally permitted purposes, including requested services, order production, customer support, security, fraud prevention, accounting, legal compliance, and dispute resolution. The right to limit certain sensitive-personal-information uses is available when required by law.

We do not use the statement above to waive California residents’ rights or to deem all sensitive information lawfully disclosed merely because it was voluntarily uploaded.

13. Retention of Personal Information

We retain personal information for as long as reasonably necessary and proportionate to achieve the purposes described in this notice, unless a longer retention period is required or permitted by law.

Our retention periods depend on the nature of the information, the purpose for which it was collected, the sensitivity of the information, legal and operational requirements, and the need to protect our rights and the rights of others.

14. California Privacy Rights

California residents may have the following rights under the CCPA/CPRA, subject to verification and legal exceptions.

Right to Know / Access

You may request that we disclose personal information we have collected about you, including:

• The categories of personal information we collected.
• The categories of sources from which we collected personal information.
• The business or commercial purposes for collecting, selling, or sharing personal information.
• The categories of third parties to whom we disclosed personal information.
• The categories of personal information sold, shared, or disclosed for a business purpose.
• The specific pieces of personal information we collected about you, subject to legal limitations.

Right to Data Portability

You may request that we provide certain personal information in a portable and, to the extent technically feasible, readily usable format.

Right to Delete

You may request that we delete personal information we collected from you, subject to exceptions. We may deny or limit a deletion request where retaining the information is necessary or permitted, including to:

• Complete a transaction or fulfill an order.
• Provide goods or services you requested.
• Process payments, refunds, disputes, chargebacks, or reprints.
• Maintain tax, accounting, business, and legal records.
• Detect security incidents or prevent fraud.
• Debug or repair systems.
• Comply with legal obligations.
• Exercise or defend legal claims.
• Protect the rights, property, safety, or security of SameDayTshirts, our customers, vendors, service providers, or others.
• Use information internally in a lawful manner compatible with the context in which you provided it.

Right to Correct

You may request that we correct inaccurate personal information we maintain about you. We may ask for documentation where appropriate and may deny requests where we determine the information is more likely than not accurate based on the totality of the circumstances.

Right to Opt Out of Sale or Sharing

You may request that we stop selling or sharing your personal information. SameDayTshirts does not sell personal information for money, but certain advertising, analytics, marketing, retargeting, attribution, or similar activities may be considered a sale or sharing under California law.

To request this right, email info@samedaytshirts.com and specify that you wish to opt out of the sale or sharing of personal information. Where additional opt-out methods are required by law, those methods must also be provided.

Right to Limit Use and Disclosure of Sensitive Personal Information

You may have the right to limit our use and disclosure of sensitive personal information where we use it for purposes beyond those permitted by California law.

Whether a right to limit is triggered depends on our actual uses and disclosures of sensitive personal information. We will provide any applicable limitation right and legally compliant method when required.

Right to Non-Discrimination

We will not discriminate against you for exercising your California privacy rights. Unless permitted by law, we will not:

• Deny you goods or services.
• Charge you a different price or rate.
• Provide a different level or quality of goods or services.
• Suggest that you may receive a different price, rate, level, or quality of goods or services.

Right to Use an Authorized Agent

You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization, and we may require you to verify your identity directly with us or confirm that you authorized the agent to submit the request.

15. How to Submit a California Privacy Request

California residents may submit requests to know/access, delete, or correct their personal information by email at info@samedaytshirts.com. They may also contact us using the mailing address and listed business phone.

California residents may request to opt out of the sale or sharing of personal information, or submit other applicable privacy rights requests, by emailing info@samedaytshirts.com and identifying the right they wish to exercise. Qualifying browser opt-out preference signals, including Global Privacy Control (GPC), must be honored where required by law. A separate functional website opt-out method must also be provided where legally required.

For requests to know, delete, or correct, we may reasonably verify your identity or authority using information appropriate to the nature of the request and information requested, including account or order details, but we will not ask for more personal information than necessary. Saved-design visibility through entry of an email address, as described in Section 7A, is not adequate verification of identity for a California privacy-rights request.

Where the law permits, we may refuse or limit a request that cannot be verified or falls within an exception—for example where records are needed to finish an order, complete payment, handle refunds/reprints or disputes, maintain legally required tax or accounting records, prevent fraud, preserve security or evidence, protect rights, or defend claims. We will explain denials and applicable appeal or further contact options as required.

You may designate an authorized agent. We may require legally permitted proof of authorization and identity verification. We will not impose verification requirements on an opt-out request where prohibited.

Contact: SameDayTshirts, 102 Mall Circle Dr, Monroeville, PA 15146; info@samedaytshirts.com; +1 (773) 303-6007 (business phone/text; not represented as toll-free).

16. Response Timing

For verifiable requests to know, delete, or correct, we will confirm receipt and respond within the periods required by California law, generally within 45 calendar days, subject to a permitted extension of up to an additional 45 days with required notice. Different response deadlines and processes may apply to opt-out and sensitive-information limitation requests.

When required, we will provide information beyond the immediately preceding 12 months for data collected on or after January 1, 2022, subject to statutory exceptions such as disproportionate effort. A consumer may submit up to two requests to know in a 12-month period as provided by law. We may withhold specific sensitive authentication credentials or data that cannot lawfully be disclosed, while providing required category-level information.

17. Cookies, Analytics, Advertising, and Session Replay

We and certain third parties may use essential website cookies, pixels, tags, web beacons, server logs, analytics tools, advertising identifiers, conversion APIs, retargeting tools, session replay, heatmaps, and related technologies. Depending on configuration, these tools may collect device or network identifiers, website and design-studio interactions, viewed products, carts, checkout events, clicks, referral sources, approximate location, and marketing engagement.

We use these technologies for website and design-studio functionality, security, debugging, support, measurement, personalization, audience analytics, conversion attribution, and advertising. Some activities may constitute sale or sharing under California law; Section 10 describes applicable opt-out rights.

Cookies may be controlled using browser or device settings, and eligible California residents may use qualifying opt-out preference signals.

Disabling essential technologies may affect the site, shopping cart, design tools, or order functionality. We will not condition legally required privacy rights on accepting unnecessary cookies.

18. Minors

SameDayTshirts’s services are not intended for children below the applicable legal age. Our Terms & Conditions state that users must be at least 18 years old to use our services.

We do not knowingly sell or share personal information of consumers under 16 years of age. If we learn that we have collected personal information from a child in a manner that requires parental consent or other action under applicable law, we will take appropriate steps to address the information.

19. Financial Incentives

We may offer promotions, coupons, referral rewards, newsletter sign-up incentives, surveys, feedback programs, or complimentary products (including a custom T-shirt in some programs). Not every discount or promotion constitutes a financial incentive under the CCPA. A program that offers a benefit in exchange for collecting, retaining, selling, or sharing personal information may trigger a separate notice and opt-in requirements.

Where a program qualifies, we will provide a program-specific Notice of Financial Incentive before enrollment identifying the benefit, eligible information, material terms, how to opt in, how to withdraw, and a good-faith estimate and methodology for the value of the information, as required by law. Participation is voluntary and withdrawal is available as legally required.

20. Security

We seek to maintain administrative, technical, organizational, and physical safeguards appropriate to the nature of the personal information and our legal obligations. Different features may use different methods of authentication and access control. No internet-based system can be guaranteed to be entirely secure.

Important saved-design limitation: The saved-design retrieval feature described in Section 7A currently allows designs associated with an entered email address to be viewed without verifying ownership of that email address or requiring the account-login OTP. Accordingly, an individual who knows another customer’s email address may be able to view the designs associated with it. SameDayTshirts does not represent that saved designs are confidential to the verified email owner or protected by account-login authentication.

You are responsible for keeping account credentials, private links, and devices secure; uploading only materials that you are permitted to submit; and contacting us promptly if you suspect misuse. Customer precautions and this disclosure do not eliminate SameDayTshirts’s obligations under applicable privacy and security laws, nor do they authorize anyone to access another person’s information without permission.

We may investigate reports, preserve evidence where available, assist affected customers, restrict improper use when possible, and take other steps appropriate to the circumstances and law.

21. Deidentified and Aggregated Information

We may use deidentified, anonymized, or aggregated information for analytics, reporting, research, product development, operational improvement, advertising measurement, and other lawful business purposes.

Where we maintain deidentified information, we will take reasonable measures designed to prevent reidentification and will not attempt to reidentify the information except as permitted by law.

22. Business Transfers

If SameDayTshirts is involved in a merger, acquisition, financing, investment, reorganization, bankruptcy, sale of assets, transfer of business, or similar transaction, personal information may be disclosed, transferred, or made available as part of that transaction, due diligence, negotiations, or post-transaction integration, subject to applicable law.

23. Changes to This California Privacy Notice

We may revise this California Privacy Notice as our practices or applicable requirements change. We will post the updated notice and identify the last-updated/effective dates. Material changes will be communicated by an appropriate method when required, and we will obtain consent where law requires it. Updates do not retroactively waive rights or authorize previously unlawful processing.

Review the most recent notice for current information. Where a conflict exists with mandatory California law, applicable law controls.

24. Contact Information

If you have questions or concerns about this California Privacy Notice, our Privacy Policy, or our privacy practices, or if you wish to exercise your California privacy rights, you may contact us at:

SameDayTshirts
Mailing Address: 102 Mall Circle Dr, Monroeville PA 15146
Email: info@samedaytshirts.com
Phone/Text: +1 (773) 303-6007
Website: www.samedaytshirts.com

We will make reasonable efforts to respond to your inquiry in accordance with applicable law.