Privacy Notice for California Residents
Last Updated: June 30, 2023
This Privacy Notice describes how we collect, use, disclose, and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act.
Under the CCPA, "personal information" is information that identifies, relates to, or could reasonably be linked with a particular California resident or household. Personal information does not include publicly available information that is from federal, state, or local government records, such as professional licenses and public real estate/property records. The definition of publicly available information also includes information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer or from widely distributed media, or certain information disclosed by a consumer and made available if the consumer has not restricted the information to a specific audience. The CCPA also exempts certain types of information such as certain medical information and consumer credit reporting information.
Collection and Use of Personal Information
We collect personal information from and about consumers for a variety of purposes. The personal information that we collect about a specific California consumer will depend on, for example, our relationship or interaction with that individual.
- Identifiers: A real name, postal address, internet protocol address, email address, account name, or other similar identifiers.
- Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): A real name, signature, social security number, physical characteristic or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
- Protected classification characteristics under California or federal law: Age (40 years or older), national origin, marital status, gender, veteran, or military status.
- Commercial information: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Biometric information: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, scans of the hands or face geometry, voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
- Internet or other electronic network activity information: Browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.
- Geolocation data: Precise physical location or movements.
- Audio and visual information: Audio, electronic, visual, thermal, olfactory, or similar information.
- Employment information: Professional or employment-related information, such as work history and prior employer information from background checks, resumes, and personnel files.
- Education information: Education information is defined as information that is not publicly available or personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).
- Inferences drawn from other personal information: Profile reflecting an individual’s preferences, characteristics, and predispositions.
- Sensitive personal information:
- Social Security number, driver's license, state identification card, or passport number;
- Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;
- Precise geolocation;
- Racial or ethnic origin, religious or philosophical beliefs, citizenship, or immigration status;
- The contents of mail, email, and text messages unless we are the intended recipient of the communication;
- Biometric information processed to uniquely identify an individual; and
- Health information, sexual orientation.
Sources of Collecting Personal Information
We collect this information from a variety of sources including, but not limited to:
- Directly from you or other individuals acting on your behalf, through, for example, physical (e.g., paper application), audible (e.g., phone), and electronic (e.g., website, social media) sources.
- Indirectly from you, such as from observing your actions on our website.
- Records and copies of your correspondence (including email addresses), if you contact us in relation to our products or services.
- Your responses to surveys that we might ask you to complete for research or marketing purposes.
- Details of transactions you carry out on our website and fulfillment of your service orders.
Purposes for Collecting Personal Information
We may collect, use, or disclose personal information about you for one or more of the following purposes:
- Deliver and maintain products and services;
- Establish and maintain your account and billing records;
- Measure credit and payment risk;
- Provide account-related services and information;
- Help you with service and technical support issues or questions;
- Manage and protect our networks, services, employees, and users;
- Detect and prevent fraud;
- Help us improve and personalize your service;
- Research, develop and market new products and services;
- Authenticate your identity;
- Deliver personalized content and offerings to you; or
- To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
Disclosure of Personal Information
You also have the right to limit the sensitive personal information about you to only that which is necessary to provide the goods or perform the services reasonably expected by an average consumer who requests those goods or services. You can limit our use and disclosure of your sensitive personal information by following the directions provided under “How to Exercise Your Privacy Rights” below.
Selling or Sharing for Targeted Advertising
We do not rent, sell, or share your personal information with non-affiliated companies for their direct marketing purposes, unless we have your permission. We have no actual knowledge that we sell or share personal information of California consumers 16 years of age and younger.
Your Privacy Choices
If you are a California consumer, you have the right to request that we:
- Disclose to you the following information covering the 12-month period prior to your request ("Right to Know"):
- The categories of personal information we collected about you and the categories of sources from which we collected the personal information;
- The business or commercial purpose for collecting personal information about you;
- The categories of third parties to whom we disclosed personal information about you, and the categories of personal information disclosed; and
- The specific pieces of personal information we collected about you.
- Delete personal information we collected from you (“Right to Delete”).
- Correct inaccurate personal information that we maintain about you (“Right to Correct”).
In addition, you have the right to be free from discrimination by a business for exercising your CCPA privacy rights.
There may be information we will not return in response to your access request, such as information that would affect the privacy of others or interfere with legal requirements. Similarly, there may be reasons why we cannot comply with your deletion request, such as the need to keep your personal information in order to provide you service or to fulfill a legal obligation. Additionally, in certain circumstances, we may not collect sufficient identifiers to match information in our records with your request.
How to Exercise Your Privacy Rights
To submit a request to exercise one of the privacy rights identified above, please submit a request by:
- Emailing us at firstname.lastname@example.org
- Calling us at 1 (888) 912-6180
Only the California consumer, or a person that is authorized to act on your behalf, may make a request related to your personal information. In any of these cases, the request must be verifiable before we can fulfill such request. Verifying a request will require sufficient information for us to reasonably verify your identity or that an individual is a person authorized to act on the California consumer’s behalf.
In certain circumstances, you are permitted to use an authorized agent (as that term is defined by the CCPA) to submit requests on your behalf through the designated methods set forth in this Privacy Notice where we can verify the authorized agent’s authority to act on your behalf.
For requests to know, delete, or correct personal information, we require the following for verification purposes:
- a power of attorney valid under the laws of California from you or your authorized agent; or
- sufficient evidence to show that you have:
- provided the authorized agent signed permission to act on your behalf; and
- verified your own identity directly with us pursuant to the instructions set forth in this Privacy Notice; or directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf.
For requests to opt-out of personal information “sales” or “sharing”, as those terms are defined in the CCPA, we require a signed permission demonstrating your authorized agent has been authorized by you to act on your behalf.
Updates to This CA Notice
We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the "Last Updated" date at the beginning of this Privacy Notice. All changes shall be effective from the date last updated unless otherwise stated.
If you have any questions regarding our privacy practices as it relates to this Privacy Notice for California Residents, please contact us via email at email@example.com with the subject line, “CCPA Policy”.