This California Consumer Privacy Rights Notice ("Notice") sets forth DataGrail's disclosure obligations under California law, including the California Consumer Privacy Act of 2018 ("CCPA") and the California Civil Code section 1798.83. This Notice provides the additional details regarding the information defined as 'personal information' under applicable California law and related to a California resident or household ("Consumers" and "You") further referred to as "Personal Information."
1. Personal Information Collected and Disclosed
DataGrail collects, uses and/or discloses Personal Information as follows:
Personal Information Collected, Used and/or Disclosed for Business Purpose in Preceding 12 Months
|CCPA Category||Collected?||Source of Collection||Business Purpose||Disclosed for Business Purposes?||Purpose of Disclosure|
|Category A: Identfiers and B: Personal Information|
|Name / Alias||YES||YOU||
||Service provider (opt-in service)||
|Cell or Phone Number||YES||You||
|Unique/Online ID (cookies)||YES||YOU/DEVICE||
|Social Security Number||NO||N/A||N/A||N/A||N/A|
|Driver's License Number||NO||N/A||N/A||N/A||N/A|
|Credit or Debit Card Number / ACH||Yes (token only)||YOU||Service provider||
|Other: Medical / Financial / Health||NO||N/A||N/A||N/A||N/A|
|Category C: Protected Characteristics||NO||N/A||N/A||N/A||N/A|
|Category D: Commercial Information|
|Personal Property Records||NO||N/A||N/A||N/A||N/A|
|Category E: Biometric Information||NO||N/A||N/A||N/A||N/A|
|Category F: Internet / Network Activity|
||Yes||Use of website, services, and/or app||
|Category E: Geolocation data||NO||N/A||N/A||N/A||N/A|
|Category I: Professional / Employeement-Related||NO||N/A||N/A||N/A||N/A|
|Category J: Educational Information||NO||N/A||N/A||N/A||N/A|
|Category K: Inferences from Data Collected|
|Intelligence / Abilities / Aptitudes||NO||N/A||N/A||N/A||N/A|
Other Potential Third Party Disclosures: Personal Information may also be disclosed to third parties to serve our legitimate business interests as follows: (1) as required by law, such as to comply with a subpoena, or similar legal process, (2) as part of a merger, acquisition, bankruptcy or other transaction in which a third party assumes control of all or part of the business, (3) to investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies as required by law; (4) enforce our agreements with you, and/or (5) investigate and defend ourselves against any third-party claims or allegations.
2. Sale of Personal Information
DataGrail does not sell and will not sell your Personal Information.
3. Your Consumer Rights under CCPA.
California Consumers may contact DataGrail through their account, by email at firstname.lastname@example.org, or through this webform:
A. Request DataGrail Disclose At No Charge:
categories of Personal Information collected, used, and/or disclosed about you;
categories of sources from which Personal Information is collected
business and/or commercial purposes for collecting and disclosing your Personal Information;
categories of third parties with whom your Personal Information has been disclosed/shared; and
the specific pieces of Personal Information collected about you.
B. Request DataGrail to Delete At No Charge:
Except as exempted pursuant to CCPA 1798.105, to request DataGrail delete Personal Information.
C. Consumer Request Limitations
Please note that these rights are not absolute and in certain cases are subject to conditions or limitations as specified in the CCPA, including, but not limited to:
DataGrail is obligated to disclose/delete only upon a verifiable Consumer request from the consumer or an authorized agent acting on behalf of Consumer.
Consumers may only make a personal information request twice in a 12-month period.
Deletion is not required because it is necessary for DataGrail to maintain the Personal Information to fulfill the purposes enumerated in CCPA Section 1798.105
4. Non-Discrimination Policy
You have the right not to receive discriminatory treatment for exercising any rights conferred by the CCPA. DataGrail shall not discriminate against a consumer for exercising any rights under the CCPA, including, but not limited to, (a) denying goods or services, (b) charging different prices or rates (including discounts/penalties) that is not directly related to the value provided to DataGrail for the Personal Information, (c) suggesting Consumer will receive a different rate/price or different level of quality of goods/services
5. Your California Privacy Rights under California Civil Code Section 1798.83 & Business and Professions Code Section 22581
California law permits Consumers to request and obtain from once a year, free of charge, certain information about their Personally Identifiable Information ("PII") (as defined by California law) disclosed to third parties for direct marketing purposes in the preceding calendar year (if any). If applicable, this information would include a list of the categories of PII that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year.
In addition, a business subject to California Business and Professions Code Section 22581 must allow California residents under age 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. Your request should include a detailed description of the specific content or information to be removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.
6. Accessibility of this CCPA Policy.
You can download and print a copy of this Notice by selecting print in your Browser.
7. Contact Us
If you have any questions regarding your Personal Information or about our privacy practices, please contact us at:
Attention: Privacy Department
164 Townsend Street, Suite 12
San Francisco, CA 94107
or by email at: email@example.com.