“ We're required to notify California residents, at or before the point of assortment of their personal data, the classes of non-public information collected and the needs for which such info is used. ”