California privacy rights
California’s “Shine the Light” law permits California residents to request and obtain from us a list of what personal information (if any) we disclosed to third parties for their own direct marketing purposes in the previous calendar year and the names and addresses of those third parties. Requests may be made only once per year per person, must be sent to the email address below, and are free of charge. Requests may be sent through the contact methods listed below.
The California Consumer Privacy Act (“CCPA”) gives California residents certain rights described below with respect to their personal information. This section of the policy includes disclosures required under CCPA for California residents.
Please note that CCPA rights do not apply to personal information of our individual investor customers subject to the Gramm-Leach-Bliley Act (a federal privacy law that applies to financial institutions) or the California Financial Information Privacy Act (CalFIPA).
California Notice at Collection and Use of Personal Information
Categories of Personal Information – In the last twelve (12) months, we have collected the following categories of personal information as outlined here.
We will not collect additional categories of personal information other than those categories listed above. If we intend to collect additional categories of personal information, we will provide you with a new notice at or before the time of collection.
Retention of Personal Information – We will retain your personal information as outlined here.
Use of Personal Information – We use your personal information as outlined here.
Sources of Personal Information – We collect personal information from the following categories of sources:
- Directly from you. When you provide it to us directly whether online, by email, phone, or in-person, for example, when you create an account, sign-up to receive emails from us, or contact us.
- Automatically or indirectly from you. For example, through analytics tools, cookies, pixel tags (such as Google Analytics), or through your interactions with us on social media websites (such as LinkedIn).
- Operating Systems and Platforms. For example, we automatically collect information relating to the device used to access our Services, such as IP address, device identifiers, and browser information.
- From our Service Providers. For example, order processing and fulfillment services, commercial email providers, security consultants, and other Service Providers we engage.
Sale or Sharing of Personal Information – We do not sell or share your personal information. We may provide your personal information: (i) in response to subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law; (ii) when we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of our company, our users, or others; and in connection with the enforcement of our client agreements; or (iii) in connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
Notwithstanding the foregoing, the CCPA defines “sale” and “share” broadly, and that definition could include information that we have shared with certain technology providers that provide certain services to us, including delivering advertisements that we believe may be of interest to you. In the past twelve (12) months, we may have “sold” or “shared” (as defined under the CCPA) your personal information to advertising networks, social networks and data analytics providers.
We do not and will not knowingly “sell” or “share” the Personal Information of minors under the age of 16 without affirmative authorization.
Your Right to Portability and Request Disclosure of Information We Collect and Share About You - We are committed to ensuring that you know what personal information we collect. To that end, you can ask us for any or all of the following types of information regarding the personal information we have collected about you in the 12 months prior to our receipt of your request:
- Specific pieces of personal information we have collected about you;
- Categories of personal information we have collected about you;
- Categories of sources from which such personal information was collected;
- Categories of personal information that the business sold or disclosed for a business purpose about the consumer;
- Categories of third parties to whom the personal information was sold or disclosed for a business purpose; and
- The business or commercial purpose for collecting or selling your personal information.
Your Right To Request Deletion of Personal Information We Have Collected About You – Upon your request, we will delete the personal information we have collected about you, except for situations where the CCPA authorizes us to retain specific information, including when it is necessary for us to provide you with a good or service that you requested; perform a contract we entered into with you; maintain the functionality or security of our systems; or comply with or exercise rights provided by the law. The law also permits us to retain specific information for our exclusively internal use, but only in ways that are compatible with the context in which you provided the information to us or that are reasonably aligned with your expectations based on your relationship with us. We will act on your deletion request within the timeframes set forth below.
Your Right to Correct Your Personal Information We Have Collected About You – In certain circumstances, you have the right to correction of your inaccurate personal information. We will use commercially reasonable efforts to honor your requests.
Your Right to Ask Us Not to Sell or Share Personal Information We Have Collected About You – You can direct us not to sell or share your personal information by submitting an opt-out request by contacting us at
privacy@cclgroup.com or 1-888-685-2020. We will act on your request within the timeframes set forth below.
Your Right to Non-Discrimination – You have the right not to receive discriminatory treatment by us for the exercise of your CCPA privacy rights.
Some of our products and services, however, may require your personal information. If you choose not to provide your personal information that is necessary to provide any aspect of our products or services, you may not be able to use those products or services.
Exercising Your Rights and How We Will Respond – To exercise any of the rights above contact us at privacy@cclgroup.com or 1-888-685-2020. For requests for access or deletion, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We will provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. For requests to stop the sale of your personal information, we will comply no later than 15 business days after receipt of your request. If we expect your request is going to take us longer than normal to fulfill, we will let you know.
We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations. In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will endeavor to provide you with an explanation as to why.
Our Commitment to Allowing You to Exercise Your Rights – Non-Discrimination: If you exercise any of the rights explained in this policy, we will continue to treat you fairly. If you exercise your rights under this policy, you will not be denied or charged different prices or rates for goods or services, or provided a different level or quality of goods or services than others.
Verification of Identity – Access or Deletion Requests: We will ask you for
identifying information and attempt to match it to information that we maintain
about you. If we are unable to verify your identity with the degree of
certainty required, we will not be able to respond to your request. We will notify you to explain the basis of
the denial.
Authorized Agents – You may designate an agent to submit requests on your behalf. The agent must be a natural person or a business entity that is registered with the California Secretary of State. If you would like to designate an agent to act on your behalf, you and the agent will need to comply with our verification process:
- Requests to Know or Delete Personal Information: If the agent submits requests to access, know or delete your personal information, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf. We will also require that you verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request.
- Requests to Opt Out of Sale or Sharing: If the agent submits a request to opt out of the sale or sharing of your personal information, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out request on your behalf.
Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with California law pertaining to powers of attorney.
California Do Not Track – Some browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not respond to browsers’ do not track signals.