California Notice at Collection and Privacy Policy

Resource

Date

Jun 28, 2023

Effective and last updated June 28, 2023.

This California Notice at Collection and Privacy Policy (the “Notice”) applies only to residents of the State of California and generally describes how we collect, use, and disclose the personal information of California residents and their households (“California Personal Information”). This section includes information regarding the categories of California Personal Information to be collected, the purposes for which the categories of California Personal Information are collected or used, whether California Personal Information is sold or shared and how to opt-out of such sales and sharing, and how long the California Personal Information is retained. You can find those details by clicking on the link provided above.

However, for the purposes of this Policy, California Personal Information does not include and this Policy does not apply to information subject to applicable exceptions from the CCPA, such as deidentified information.

This section also does not apply to personal information we collected about California residents in their capacity as employees, contractors, or an emergency contacts, beneficiaries, or dependents of one our employees or contractors.

Additionally, this section applies only to the extent we direct the purposes and means of California Personal Information processing and otherwise qualify as a “business” under the CCPA. It does not apply to activities we perform on behalf of our business customers as a “service provider.”

A. California Personal Information We Collect

We may collect, and may have collected in the preceding 12 months, the following categories of California Personal Information as described in section 3 (Information We Collect or Receive) of our Privacy Statement:

Identifiers, including unique and online identifiers.
Commercial information.
Internet and other electronic activity information.
Inferences drawn from your activity.
Professional and employment information.
Characteristics of protected classifications under California or federal law.
Geolocation data, such as your general location as may be derived from IP addresses.
Other categories of personal information described in California.
Sensitive California Personal Information, as defined under the CCPA.

We retain California Personal Information for as long as necessary to carry out the processing activities described in this Policy, including but not limited to providing the Websites, products, and other services, compliance with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies, and protecting our, our employees’, and our business partners’ and clients’ rights, property, or safety, and the rights, property, and safety of others.

B. Sources of California Personal Information We Collect

We may have collected or obtained California Personal Information from the sources described in our Privacy Statement, including:

Directly from you;
Automatically and indirectly from your devices, such as information processed through cookies, information processed in log files, and information processed through other similar technologies.

C. Purposes for Using, Disclosing, and Otherwise Processing California Personal Information

We may generally collect and use the categories of California Personal Information described in the California Personal Information We Collect section above for one or more of the business and commercial purposes described in section 3 (Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.

However, we will not collect or process Sensitive California Personal Information, as defined under the CCPA, for the purpose of inferring characteristics about you.

D. Disclosures of California Personal Information for a Business Purpose

In the preceding 12 months, we may have disclosed the categories of California Personal Information listed below to the categories of third parties identified below for a business purpose:

Identifiers, including unique and online identifiers—to those who need it to do work with us (service providers and vendors), for legal, protection, and safety purposes, with your consent, and for the purposes otherwise described in in section 3 (Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.
Commercial information—to those who need it to do work with us (service providers and vendors), for legal, protection, and safety purposes, with your consent, and for the purposes otherwise described in in section 3(Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.
Internet and other electronic activity information—to those who need it to do work with us (service providers and vendors), for legal, protection, and safety purposes, with your consent, and for the purposes otherwise described in in section 3 (Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.
Inferences drawn from your activity—to those who need it to do work with us (service providers and vendors), for legal, protection, and safety purposes, with your consent, and for the purposes otherwise described in in section 3 (Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.
Professional and employment information—to those who need it to do work with us (service providers and vendors), for legal, protection, and safety purposes, with your consent, and for the purposes otherwise described in in section 3 (Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.
Characteristics of protected classifications under California or federal law—to those who need it to do work with us (service providers and vendors), for legal, protection, and safety purposes, with your consent, and for the purposes otherwise described in in section 3 (Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.
Geolocation data—to those who need it to do work with us (service providers and vendors), for legal, protection, and safety purposes, with your consent, and for the purposes otherwise described in in section 3(Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.
Other categories of personal information described in California law—to those who need it to do work with us (service providers and vendors), for legal, protection, and safety purposes, with your consent, and for the purposes otherwise described in in section 3 (Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.
Sensitive California Personal Information, as defined under the CCPA—to those who need it to do work with us (service providers and vendors), for legal, protection, and safety purposes, with your consent, and for the purposes otherwise described in in section 3 (Information We Collect or Receive) and section 4 (Sharing of Personal Information) in our Privacy Statement.

E. Sales of California Personal Information and Sharing of California Personal Information for Cross-Context Behavioral Advertising

We do not sell California Personal Information in exchange for monetary consideration. However, the CCPA defines “sale” very broadly in a manner that includes disclosing California Personal Information in exchange for any other valuable consideration, and also regulates the “sharing” of California Personal Information with third parties for cross-context behavioral advertising purposes, which means displaying advertising to you based on California Personal Information obtained or inferred from your activities over time across different websites, applications, and other online services we do not operate. Under the CCPA, we may “sell” or “share,” and we may in the preceding 12 months have “sold” or “shared,” the following categories of California Personal Information:

Identifiers, including online identifiers.
Commercial information.
Internet and other electronic activity information.
Inferences drawn from your activity.
Professional and employment information.
Characteristics of protected classifications under California or federal law.
Geolocation data, such as your general location as may be derived from IP addresses.
Other categories of personal information described in California law.
Sensitive California Personal Information, as defined under the CCPA.

We may have sold or shared each of these categories of California Personal Information with third parties such as advertising networks that enable or participate in targeted and cross-context behavioral advertising, and analytics providers that provide online tracking technologies that we use to analyze use of our websites and online services. We may engage in such sales or sharing for purposes of delivering or facilitating cross-context advertising to users of the Websites and users of websites and other online services provided by third parties.

We do not have actual knowledge that we sell California Personal Information of consumers under 16 years of age or share the California Personal Information of consumers under the age of 16 for cross-context behavioral advertising purposes.

F. California Personal Information Rights and Choices

The CCPA provides consumers with specific rights regarding their California Personal Information. This section describes those rights and explains how to exercise those rights to the extent we direct the purposes and means of the processing of your California Personal Information processing and otherwise qualify as a “business” under the CCPA.

Right to Access Specific California Personal Information. You have the right to request to receive certain information about our collection, use, and disclosure of your California Personal Information during the applicable period of time for your request. If we receive and confirm a verifiable consumer request from you pursuant to the “How to Exercise Your Rights” section below, we will disclose to you, depending on the scope of the request:
- The categories of California Personal Information we collected about you.
- The categories of sources for the California Personal Information we collected about you.
- Our business or commercial purpose for collecting California Personal Information about you, selling California Personal Information about you, or sharing California Personal Information about you for cross-context behavioral advertising purposes.
- The categories of third parties to whom we disclose your California Personal Information generally.
- The specific pieces of California Personal Information we collected about you.
- If we sell your California Personal Information, share your California Personal Information for cross-context behavioral advertising purposes, or disclose your California Personal Information for a business purpose, a list of the categories of third parties to whom we sold California Personal Information, shared California Personal Information for cross-context behavioral advertising purposes, or disclosed California Personal Information for a business purpose, as applicable, identifying the categories of California Personal Information sold, shared, or disclosed to those parties during the applicable period of time for your request.
Right to Data Portability. You may request to receive a copy of your electronic California Personal Information in a readily usable format to the extent technically feasible.
Right to Deletion. You may request that we delete your California Personal Information, subject to certain exceptions.
Right to Correct Inaccuracies. You may request that we correct California Personal Information about you that is inaccurate. We will take into account the nature of the California Personal Information and the purposes of our processing when we address your request.
Right to Opt Out of Sales and Sharing for Cross-context Behavioral Advertising. You have the right to opt out of our sale of your California Personal Information and of your California Personal Information for cross-context behavioral advertising, which means displaying advertising to you based on California Personal Information obtained or inferred from your activities over time across different websites, applications, and other online services we do not operate. You may exercise this right by visiting our Cookies Information and Policy page.

We have also configured our Websites to process opt-out preference signals that may allow you to inform us of your desire to opt out of sales or sharing for cross-context behavioral advertising as described in the above paragraph. Opt-out preference signals must be in a format commonly used and recognized by businesses and be delivered by a platform, technology, or mechanism that makes clear to consumers that the use of the signal is meant to have the effect of opting the consumer out of sales and sharing of California Personal Information as described above. If you do not have an account with us or are not logged into your account, your opt-out preference signal will be linked to your browser identifier only and may not be linked to other California Personal Information, such as account information, about you that we process and that is not associated with your browser identifier.

If we receive an opt-out preference signal from you, we may offer you the option to provide additional information to help facilitate your opt-out request. We may also notify you if an opt-out preference signal we receive from you conflicts with your privacy settings or participation in certain programs we offer, and request your consent to sales or sharing of California Personal Information or to affirm your intent to withdraw from any relevant programs.

Even if you opt out of sales or sharing of your California Personal Information for cross-context behavioral advertising, you may still see our ads online at other sites and apps, and we may still base aspects of ads on your interactions with us and the Websites.

Right to Non-discrimination. Subject to certain exceptions, you have the right to not receive discriminatory treatment for exercising your access, data portability, and deletion rights described above.

G. How to Exercise Access, Data Portability, Deletion, and Correction Rights

If you would like to request to exercise the access, data portability, deletion, or correction rights described in the California Personal Information Rights and Choices section above, please submit a verifiable consumer request to us by either:

These requests can be exercised free of charge unless they are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision, and we reserve the right to either refuse to act on your request or charge you a reasonable fee to complete your request if it is excessive, repetitive, or manifestly unfounded.

Before we can respond to your request, California law requires us to verify your identity. Your request must provide information sufficient to verify you are the person about whom we collected California Personal Information or an authorized agent of that person. In order to verify your request, we may ask you to provide information such as your name, street address, city, state, zip code, and e-mail address or phone. Your request must include sufficient detail for us to properly understand, evaluate, and respond to it. If we are not able to verify your request, we will contact you for more information. If we are unable to verify your identity or authority to make the request and confirm the California Personal Information relates to you, we may not be able to respond to your request.

You may designate someone to submit requests and act on your behalf as an authorized agent. We may mandate additional requirements for requests submitted through an authorized agent, such as requiring you to verify your identity directly with us or to directly confirm the authorized agent’s permission to act on your behalf.

Making a verifiable consumer request does not require you to create an account with us. However, if you have a password-protected account with us we may consider requests made through that account sufficiently verified when the request relates to California Personal Information associated with that specific account.

If we cannot fulfill, or are permitted to decline, your request then we will alert you or your authorized agent.

Changes to this Policy

We may update this Policy to reflect changes in our privacy practices at any time and without prior notice to you. When we do so, we will update the effective and last updated date above. We encourage you to periodically review this Policy for the latest information on our privacy practices.

Contacting Us

If you have any questions or comments about this Policy or our privacy practices, please contact us by phone at (877) 629-2361, by email to privacy@stackpath.com, or by mail to:

StackPath LLC
Attention: Privacy
1950 N. Stemmons Freeway
Suite 1001
Dallas, Texas 75207