Privacy Policy with Consumer Rights and Business Practices

The privacy policy shall include the following information:

(1) Right to Know About Personal Information Collected, Disclosed, or Sold

1. Explain that a consumer has the right to request that the business disclose what personal information it collects, uses, discloses, and sells.
2. Provide instructions for submitting a verifiable consumer request to know and provide links to an online request form or portal for making the request, if offered by the business.
3. Describe in general the process the business will use to verify the consumer request, including any information the consumer must provide.
4. Identify the categories of personal information the business has collected about consumers in the preceding 12 months. The categories shall be described in a manner that provides consumers a meaningful understanding of the information being collected.
5. Identify the categories of sources from which the personal information is collected. The categories shall be described in a manner that provides consumers a meaningful understanding of the information being collected.
6. Identify the business or commercial purpose for collecting or selling personal information. The purpose shall be described in a manner that provides consumers a meaningful understanding of why the information is collected or sold.
7. Disclosure or Sale of Personal Information.

1. Identify the categories of personal information, if any, that the business has disclosed for a business purpose or sold to third parties in the preceding 12 months.
2. For each category of personal information identified, provide the categories of third parties to whom the information was disclosed or sold.
3. State whether the business has actual knowledge that it sells the personal information of minors under 16 years of age.

(2) Right to Request Deletion of Personal Information

1. Explain that the consumer has a right to request the deletion of their personal information collected by the business.
2. Provide instructions for submitting a verifiable consumer request to delete and provide links to an online request form or portal for making the request, if offered by the business.
3. Describe in general the process the business will use to verify the consumer request, including any information the consumer must provide.

(3) Right to Opt-Out of the Sale of Personal Information

1. Explain that the consumer has a right to opt-out of the sale of their personal information by a business.
2. State whether or not the business sells personal information. If the business sells personal information, include either the contents of the notice of right to opt-out or a link to it in accordance with section 999.306.

(4) Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

1. Explain that the consumer has a right not to receive discriminatory treatment by the business for the exercise of the privacy rights conferred by the CCPA.

(5) Authorized Agent a. Provide instructions on how an authorized agent can make a request under the CCPA on the consumer’s behalf.

(6) Contact for More Information

1. Provide consumers with a contact for questions or concerns about the business’s privacy policies and practices using a method reflecting the manner in which the business primarily interacts with the consumer.

(7) Date the privacy policy was last updated.

(8) If subject to the requirements set forth in section 999.317, subsection (g), the information compiled in section 999.317, subsection (g)(1), or a link to it.

(9) If the business has actual knowledge that it sells the personal information of minors under 16 years of age, a description of the processes required by sections 999.330 and 999.331.