Last Updated: September 18, 2025
Your California Privacy Rights
Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the right to opt out of the “sale” or “sharing” of their personal information. This page explains your rights and how to exercise them.
What Does “Sale” and “Sharing” Mean?
Under California law, “sale” and “sharing” have broad definitions that may include activities you might not traditionally consider as selling:
“Sale” includes:
Providing personal information to third parties for monetary or other valuable consideration
Allowing third parties to collect personal information from our website for their own purposes
Sharing data with advertising partners who use it for targeted advertising
“Sharing” includes:
Cross-context behavioral advertising (using your activity on our site to show you targeted ads elsewhere)
Providing personal information to third parties for targeted advertising purposes
Allowing advertising partners to collect information directly from your browser
Categories of Personal Information We May Sell or Share
We may sell or share the following categories of personal information:
Identifiers
Email addresses
Online identifiers (cookie IDs, device IDs)
IP addresses
User account information
Internet or Electronic Network Activity
Browsing history on our website
Search history and miles program preferences
Interaction with advertisements
Website usage patterns
Geolocation Data
General location information derived from IP address
City and state-level location data
Inferences
Preferences and characteristics derived from your activity
Miles program interests and travel preferences
Ad engagement predictions
Who We May Sell or Share Information With
We may sell or share personal information with:
Advertising Technology Partners
Google Ad Manager and Google advertising services
Facebook/Meta advertising platforms
Microsoft Advertising (Bing Ads)
TikTok advertising services
Other advertising networks and exchanges
Analytics Providers
Google Analytics
Third-party website analytics services
Marketing analytics platforms
Data Brokers and Marketing Partners
Companies that provide targeted advertising services
Marketing automation platforms
Customer data platforms
How to Opt Out
Online Opt-Out Form
You can submit an opt-out request by emailing us at [email protected] with the subject line “Do Not Sell My Personal Information” and include:
Your full name
Email address associated with your account
Specific request to opt out of sale/sharing of personal information
Universal Opt-Out Mechanisms
We recognize the following universal opt-out signals:
Global Privacy Control (GPC) browser signals
“Do Not Track” browser settings where legally required
Cookie Management
You can also limit the sharing of your information by:
Adjusting your cookie preferences on our website
Using browser settings to block third-party cookies
Installing privacy-focused browser extensions
Verification Process
To protect your privacy, we may need to verify your identity before processing your request. We may ask for:
Confirmation of your email address
Account information if you have an account with us
Additional identifying information in certain circumstances
Processing Time
We will acknowledge your request within 10 business days and complete your request within 45 days of verification. In some cases, we may extend this period by an additional 45 days if necessary.
What Happens After You Opt Out
Once you opt out:
We will stop selling or sharing your personal information going forward
You may still see advertisements, but they will be less targeted to your interests
Some website functionality may be affected
We will maintain a record of your opt-out request
Authorized Agents
You may designate an authorized agent to submit requests on your behalf. The agent must:
Provide written authorization from you
Verify their identity and authority
Complete our verification process
No Discrimination
We will not discriminate against you for exercising your privacy rights. However, we may offer different prices, rates, or services if the difference is reasonably related to the value of your personal information.
Retention of Opt-Out Requests
We will maintain records of opt-out requests for at least 24 months to ensure compliance with your preferences.
Children’s Privacy
We do not knowingly sell or share the personal information of consumers under 16 years of age without appropriate consent.
Updates to This Page
We may update this page to reflect changes in our practices or legal requirements. The “Last Updated” date will be revised accordingly.
More Information
For detailed information about how we collect, use, and protect your personal information, please see our complete Privacy Policy.
Contact Information
For questions about your privacy rights or to submit requests:
Email: [email protected]
Subject Line: Privacy Rights Request or Do Not Sell My Personal Information
Mailing Address:
Milhas Money Privacy Team
1234 Business Plaza, Suite 100
New York, NY 10001
United States
Response Time: We typically respond within 10 business days
Additional Resources
California Attorney General CCPA Information: https://oag.ca.gov/privacy/ccpa
California Privacy Rights Act: https://cppa.ca.gov/
Consumer Privacy Resources: https://www.caprivacy.org/
We are committed to respecting your privacy choices and protecting your personal information in accordance with California privacy laws.