California privacy notice
Last Updated: December 31, 2019
1. Scope of Disclosures.
This CA Notice provides additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”).
2. Personal Information Disclosures.
When we use the term “personal information” in this CA Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include aggregated or anonymized deidentified information that is maintained in a form that is not capable of being associated with or linked to you.
2.1. Collection and Use of Personal Information
2.2. Disclosure of Personal Information
In the last 12 months, we have disclosed for a business purpose and sold the following categories of personal information, which reference the categories of personal information described above:
2.3. To Whom We Disclose Personal Information
Broker and Loan Provider Partners
Customer Service Vendors
Cloud Computing Service Providers
IT and Quality Assurance Vendors
Marketing and Advertising Partners
Payment and Auditing Processors
Security Safety Vendors and Service Providers
3. Your California Privacy Rights
As a California resident, you may be able to exercise the following rights in relation to the Personal Information about you that we have collected (subject to certain limitations at law):
The Right to Know
You have the right to request any or all of the following information relating to the personal information we have collected about you or disclosed in the last 12 months, upon verification of your identity:
The specific pieces of personal information we have collected about you;
The categories of personal information we have collected about you;
The categories of sources of the personal information we have collected about you;
The categories of personal information that we have disclosed about you to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
The categories of personal information we have sold about you, and the categories of third parties to whom this information was sold; and
The business or commercial purposes for collecting or selling personal information about you.
The Right to Request Deletion
You have the right to request the deletion of personal information that we have collected from you, subject to certain exceptions.
The Right to Opt Out
The right to direct us not to sell personal information we have collected about you to third parties.
The Right to Non-Discrimination
You have the right not to receive discriminatory treatment for exercising any of the rights described above.
However, please note that if the exercise of the rights described above limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products or services or engage with you in the same manner.
“Shine the Light”
California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code § 1798.83).
3.1. How to Exercise Your Right to Know or Right to Deletion
To exercise your right to know and right to deletion, please submit a request by:
Emailing firstname.lastname@example.org with the subject line “California Rights Request,” or
Calling (855) 572-7707.
We will need to verify your identity before processing your request. In order to verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems.
Although we try to limit the personal information collected in connection with a request to exercise the right to know and the right to deletion, certain requests may require us to obtain additional personal information from you. In certain circumstances, we may decline a request to exercise the right to know and right to deletion, particularly where we are unable to verify your identity.
3.2. How to Exercise Your Right to Opt Out
3.3. Minors Under Age 16
We do not sell the personal information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the “Right to Opt In”) from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.
3.4. “Shine the Light”
California Civil Code Section 1798.83 permits our customers who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to email@example.com. Please note that we are only required to respond to one request per customer each year.
3.5. Authorized Agent
In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf where (i) you provide sufficient evidence to show that the requestor is an authorized agent with written permission to act on your behalf and (ii) you successfully verify your own identity with us.
4. Financial Incentives.
We do not offer any financial incentives in exchange for the retention or sale of personal information. If we do offer any financial incentives in the future, we will provide a summary of the incentive offered the categories of personal information implicated, how a consumer can opt-in and an explanation of why the financial incentive is permitted under the CCPA.
5. Updates to This California Notice.
We will update this CA Notice from time to time. When we make changes to this CA Notice, we will change the "Last Updated" date at the beginning of this CA Notice. All changes shall be effective from the date of publication unless otherwise provided in the notification.