CCPA

WHAT IS CCPA?

CCPA stands for the California Consumer Privacy Act which goes into effect on January 1, 2020. The CCPA regulates how companies collect and process personal information, what they can and cannot do with that data, and stipulates certain penalties for non-compliance. The CCPA defines personal information broadly. As a result, just about all of the data Zaius processes on our platform is considered personal information under the CCPA. For more information about Zaius’ privacy practices, please visit our privacy policy at https://www.zaius.com/legal/privacy-policy/.

Your California Data Access, Deletion and Opt-out Rights

The California Consumer Privacy Act (CCPA) provides certain rights to California consumers – including the right to know the personal information that we may have about you, and the right to delete that information.  Zaius is committed to transparency, and we want California consumers to have access to personal information that we may have about them and/or the devices that they may use to access the Internet. We ask only for the minimum information necessary to help us process a subject access or deletion request and will keep information pertaining to your request for at least two years to meet CCPA compliance requirements.

Where we operate as a Service Provider on the Platform

Please note that the information we process on our Platform as part of the Services we provide is owned and/or controlled by our customers; not Zaius. We are the agent of our customers with respect to the data on our Platform, and as such we are prohibited from processing this data except as directed in writing by those customers. For that reason, if you make a request about personal information processed on the Zaius Platform, we will respectfully ask that you submit your request to the applicable Zaius customer directly.

Where we operate as a Business with respect to our Website and Business Operations

If you are a customer of Zaius with a login and password to the Zaius platform, we ask that you first direct your request to the person or persons at your organization that administers the relationship with Zaius.

Your Rights

If you make a subject access request as set out in this policy, you are entitled to see and delete the personal information that we have about you including any digital identifiers such as cookie IDs and mobile advertising IDs that Zaius may collect and process via our website and business operations. We will confirm your request within 10 days and make a good faith attempt to fulfill your request within 45 days. 

Under the CCPA, your request to see the personal information that we have about you may include: (1) specific pieces of personal information that we may have about you; (2) categories of personal information we have collected about you; (3) categories of sources from which the personal information is collected; (4) categories of personal information that we sold or disclosed for a business purpose about you; (5) categories of third parties to whom the personal information was sold or disclosed for a business purpose under the CCPA; and (6) the business or commercial purpose for collecting or selling personal information. Most of this information is described generally in our privacy policy at https://www.zaius.com/legal/privacy-policy/.

 

Verifying Data Subject Access and Deletion Requests

We may take steps to verify your request and may require you to demonstrate that you own or control the computer or device from which you are making such requests – particularly where you are seeking access to or deletion of pseudonymous personal information such as digital identifiers.

We will fulfill requests we are able to verify so long as we are not prohibited from doing so by applicable law and/or the information is not essential for us for billing, fraud prevention or security purposes. We will share our reason(s) for denying your request in the event that we are unable to fulfill your request. If we are unable to fulfil your deletion request, we may invite you to make a request to opt-out at our privacy policy. 

Access and Deletion Requests made via Authorized Agents

You may make an access or deletion request via an authorized agent by having such agent follow the process below. Please note that we will request any authorized agent demonstrate that they have been authorized by you to make a request on your behalf. And we will attempt to verify your request. We require any authorized agents to provide us with contact details such as an email address and phone number so that we may ensure a timely response to the consumer.

For more information about Zaius’ California access and deletion request policy, please email compliance@zauis.com or you may contact us on our toll free CCPA California consumer hotline at 1-877-636-1232. 

You may also write us at the following address:

Zaius, Inc.
Privacy Office

205 Portland St, 

Boston, MA 02114

 

FOR ANY OTHER QUESTIONS, PLEASE CONTACT COMPLIANCE@ZAIUS.COM.