California Civil Code Sections 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 indicate that organizations should disclose whether the following categories of personal information are collected, transferred for “valuable consideration,” or transferred for an organization’s “business purpose” (as those terms are defined under California law). The table below indicates the categories of personal information we collect and transfer in a variety of contexts. Please note that because this list is comprehensive, it may refer to types of information that we collect and share about people other than yourself. For example, while we transfer credit card or debit card numbers for our business purpose in order to process payments for orders placed with us, we do not collect or transfer credit card or debit card numbers of individuals that submit questions through our website’s “contact us” page.
Categories of Personal Information We Collect
To Whom We Disclose Personal Information for a Business Purpose
Identifiers – this may include real name, alias, postal address, unique personal identifier, online identifier, email address, account name, social security number, driver’s license number, passport number or other similar identifiers.
- Advertising networks
- Affiliates or subsidiaries
- Business partners
- Data analytics providers
- Government entities, as may be needed to comply with law or prevent illegal activity
- Internet service providers
- Joint marketing partners
- Operating systems and platforms
- Other Service Providers
- Payment processors and financial institutions
- Professional services organizations, this may include auditors and law firms
- Social networks
Additional categories of personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) – this may include state identification card number, bank account number and other financial information.
- Advertising networks
- Affiliates or subsidiaries
- Business partners
- Data analytics providers
- Government entities, as may be needed to comply with law or prevent illegal activity
- Internet service providers
- Joint marketing partners
- Operating systems and platforms
- Other Service Providers
- Payment processors and financial institutions
- Professional services organizations, this may include auditors and law firms
- Social networks
Characteristics of protected classifications – this may include age, sex, race, ethnicity, etc.
- Advertising networks
- Affiliates or subsidiaries
- Business partners
- Data analytics providers
- Government entities, as may be needed to comply with law or prevent illegal activity
- Internet service providers
- Joint marketing partners
- Operating systems and platforms
- Other Service Providers
- Payment processors and financial institutions
- Professional services organizations, this may include auditors and law firms
- Social networks
Commercial information – this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Advertising networks
- Affiliates or subsidiaries
- Business partners
- Data analytics providers
- Government entities, as may be needed to comply with law or prevent illegal activity
- Internet service providers
- Joint marketing partners
- Operating systems and platforms
- Other Service Providers
- Payment processors and financial institutions
- Professional services organizations, this may include auditors and law firms
- Social networks
Internet or other electronic network activity information – this may include browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement.
- Advertising networks
- Affiliates or subsidiaries
- Business partners
- Data analytics providers
- Government entities, as may be needed to comply with law or prevent illegal activity
- Internet service providers
- Joint marketing partners
- Operating systems and platforms
- Other Service Providers
- Payment processors and financial institutions
- Professional services organizations, this may include auditors and law firms
- Social networks
Audio, electronic, visual, thermal, olfactory, or similar information
- Advertising networks
- Affiliates or subsidiaries
- Business partners
- Data analytics providers
- Government entities, as may be needed to comply with law or prevent illegal activity
- Internet service providers
- Joint marketing partners
- Operating systems and platforms
- Other Service Providers
- Payment processors and financial institutions
- Professional services organizations, this may include auditors and law firms
- Social networks
Professional or employment-related information
- Advertising networks
- Affiliates or subsidiaries
- Business partners
- Data analytics providers
- Government entities, as may be needed to comply with law or prevent illegal activity
- Internet service providers
- Joint marketing partners
- Operating systems and platforms
- Other Service Providers
- Payment processors and financial institutions
- Professional services organizations, this may include auditors and law firms
- Social networks
Inferences drawn from any of the information listed above
- Advertising networks
- Affiliates or subsidiaries
- Business partners
- Data analytics providers
- Government entities, as may be needed to comply with law or prevent illegal activity
- Internet service providers
- Joint marketing partners
- Operating systems and platforms
- Other Service Providers
- Payment processors and financial institutions
- Professional services organizations, this may include auditors and law firms
- Social networks
