As of January 1, 2020, verified California residents will have the right to:
- request and receive our personal information collection practices during the prior 12 months, including the categories of personal information we collect, the categories of sources of such information, our business purpose for collecting or sharing such information, and the categories of third parties with whom we share such information;
- request and receive a copy of the personal information we have collected about them during the prior 12 months;
- request and receive disclosure of our information sharing practices during the prior 12 months, including a list of the categories of personal information that we sold with the categories of third-party recipients and a list of the categories of personal information that we disclosed for a business purpose;
- request that we not sell personal information about them; and
- request that we delete (and direct our service providers to delete) their personal information, subject to certain exceptions.
For purposes of the CCPA, “personal information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.
We will not discriminate against you as a result of your exercise of any of these rights.
In order to make a request for disclosure, California residents may contact us by calling us toll-free at 888-720-7975 or visiting our disclosure request page here. We will ask you for information that allows us to reasonably verify your identity (that you are the person about whom we collected personal information) and will use that information only for that purpose. We may request that you submit a signed statement under penalty of perjury that you are the individual you claim to be. We will acknowledge receipt of your request within 10 days and will endeavor to respond within forty-five days of receipt of your request. If we require more time (up to an additional forty-five days), we will notify you of our need for additional time. For requests that we not sell your information, we will comply with your request within 15 days. We cannot respond to your request or provide you with personal information if we cannot verify your identity and confirm that the personal information relates to you.
You may make a request for disclosure of our information collection practices, the information we collected about you, or our sharing practices up to twice within a 12-month period. You may make a request that we not sell your information or we delete your information at any time.
For requests for a copy of the personal information we have collected during the 12 months prior to your request, we will endeavor to provide the information in a format that is readily useable, including by mailing you a paper copy or providing an electronic copy to your registered account (if applicable).
For requests for deletion of your information, please understand that California law permits us to retain certain information and not delete it under certain circumstances. By way of example, we are not required to comply with a request to delete information if the information is necessary for us to complete a transaction for you or otherwise perform a contract; to detect, protect against, or prosecute security incidents, fraud or illegal activity; to use the information only internally in ways reasonably aligned with your expectations as our customer (such as maintaining sales records); and to comply with legal obligations. If we receive such a request from you, we will notify any service providers we have engaged to delete your information as well.
We do not sell your information for monetary consideration, but we may transfer your information to a third party that provides us with services, such as advertising, data analysis and security. These services may qualify as “other valuable consideration” for purposes of the definition of a “sale” under the CCPA. If you are a California resident over the age of 16 and would like to instruct us not to sell your personal information, please visit our Do-Not-Sell web page here. We do not sell personal information of individuals we actually know are less than 16 years of age. If you request that we not sell your information, we will honor your request within 15 days, will notify those who received your information during the 90 days before your request to not further sell your information and will notify you when this has been completed. Once we receive your Do-Not-Sell request, we will wait at least 12 months before asking you to reauthorize sales of your personal information.
Using an Authorized Agent
You may submit a request through someone holding a formal Power of Attorney. Otherwise, you may submit a request using an authorized agent only if (1) you provide the authorized agent with written permission to make a request, and (2) you verify your own identity directly with us. We will require the agent to submit proof to us that the agent has been authorized to make requests on your behalf.
During the past 12 months, we have collected the following categories of information from the listed sources, used it for the listed business purposes and shared it with the listed categories of third parties. The categories of information include information we collect from our website visitors, registered users, employees, vendors, suppliers and any other person that interacts with us either online or offline. Not all information is collected about all individuals. For instance, we may collect different information from applicants for employment, vendors or customers.