California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA) creates new consumer rights for residents of the state of California relating to the access to, deletion of, and sharing of personal information that is collected by businesses.

Do Not Sell

As a resident of California, you have the right to opt-out of the “sale” of your personal information to “third parties.” Sale is defined very broadly. The law defines “sale” more broadly than you might think. It doesn’t just include the exchange of data for money.

We do not transfer your information to third parties in exchange for money and we will not do so. However, we do transfer personal information to certain third parties in order to operate our business (for example, to market our products and services). It is possible that someone could claim that this transfer was in exchange for “other valuable consideration.”

Right To Know

You may request that we provide you for the last 12 months a list of the categories of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting or “selling” the information, and the categories of “third parties” to whom we disclosed or “sold” that information. You may also request that we provide you in a machine-readable format a copy of the specific pieces of personal information we have collected about you in the past 12 months. You may make a request to know up to two times in a 12-month period, subject to limitations described in the law. For a list of general categories of information that we have collected and shared in the past 12 months, see the tables the “What Information Do We Collect And How Is It Collected” in our Privacy Policy.

Right To Delete

You may request that we delete any personal information that we have collected from you. However, the law exempts certain information from deletion. For example, we may keep information necessary for security and fraud detection. We also may keep information needed to provide you goods or services. When we respond to your request to delete, we will explain what (if any) information we have kept and why. Please note that the law does not consider anonymized or pseudonymized information to be “personal information,” and we may “delete” your information by anonymizing or pseudonymizing it.