California Privacy Rights

Scope

Effective 8 November 2026. This page explains California privacy rights where the California Consumer Privacy Act, as amended by the CPRA, applies to processing for which Adhit Media OÜ is responsible. It supplements the Privacy Policy. It does not certify that every Adhit activity or independent partner is subject to, exempt from or compliant with the CCPA.

This is a rights and contact supplement, not a representation that the processing practices of every advertiser, publisher or partner have been audited. It does not replace any activity-specific notice at collection or disclosures required by applicable law. Privacy contact: info@adhit.com; Vesivärava tn 50, 10152 Tallinn, Estonia.

Information and responsibility

Adhit's Privacy Policy describes its own contact enquiries, corporate statistics and administration of business and advertising services. For a particular collection, the applicable notice must identify the actual personal information categories, purposes and retention periods or criteria, and any applicable sale or sharing. Historical disclosures must reflect actual practices, including the preceding 12 months where required.

Independent partners determine their own processing and retention under their own policies. That does not remove Adhit's responsibility for personal information it collects, uses or discloses, or for providers processing on its instructions. The absence of a separate payment for data does not by itself establish that a disclosure is neither sale nor sharing.

Rights where applicable

You may have the right to know categories or specific pieces of personal information collected, sources, purposes, disclosures and relevant recipients; request correction; request deletion subject to legal exceptions; opt out of sale or sharing; and limit specified uses or disclosures of sensitive personal information when the statutory conditions apply. Exercising these rights must not result in unlawful discrimination.

Sharing can include disclosure for cross-context behavioural advertising even without a monetary payment. This supplement makes no unverified blanket statement that Adhit never sells or shares personal information. Where relevant processing constitutes sale or sharing, the statutory notice and effective opt-out requirements apply to that activity.

For the optional adhit.com statistics module, browsers sending Global Privacy Control or Do Not Track signals are excluded. Statistics settings in the footer govern that module only. They should not be understood as proof of a network-wide advertising opt-out or of downstream partners receiving a choice. If an integration is subject to a GPC or other opt-out obligation, that obligation is not replaced by this explanation.

Requests and authorised agents

To make a request about Adhit's processing, email info@adhit.com or use https://adhit.com/contact_us. Identify the service and request and provide only information reasonably needed to locate the records. Do not send passwords, full payment card details or unsolicited identity documents.

Requests to know, correct or delete can require reasonable identity verification. An authorised agent may be asked for proof of authority and applicable verification. An opt-out must not be subjected to the verification requirements applicable to access or deletion. Where additional request methods or browser-based controls are legally required, a contact email is not a substitute for them.

For requests to know, correct or delete, the applicable rules generally require confirmation of receipt within 10 business days and a substantive response within 45 calendar days, with a notified extension of up to a further 45 days where permitted. Sale or sharing opt-outs and applicable sensitive-information limitation requests must be implemented as soon as feasibly possible, generally no later than 15 business days. The 45-day period is not the opt-out deadline.

Independent partners and updates

A request about information independently controlled by a partner may be submitted to that partner under its policy. Adhit remains responsible for requests relating to its own processing and any legally required coordination. Independent partner retention is not a waiver of those obligations.

Rights can be subject to applicable exceptions. Any required disclosures about sensitive information, minors, sale or sharing and retention must reflect the actual processing; no claim about those facts is created by this general supplement. This page will be updated when its content materially changes. You may also consult the California Privacy Protection Agency at https://cppa.ca.gov and the California Attorney General at https://oag.ca.gov/privacy/ccpa.