Last Modified: January 2020
This section contains disclosures required by the California Consumer Privacy Act (“CCPA”) and applies only to “personal information” that is subject to the CCPA. For example, this notice does not apply to personal information that is exempted from the CCPA, such as personal information covered by other privacy laws like the Health Insurance Portability and Accountability Act, the Confidentiality of Medical Information Act, the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, or the California Financial Information Privacy Act. Consumers with disabilities may access this notice by using a standard screen reader or contacting us at (617) 330-5700.
Personal Information We Collect and Disclose for a Business Purpose. We collect the categories of personal information about California consumers identified in the chart below. As further set forth in the chart below, in the past twelve (12) months, we have disclosed California consumers’ personal information to third parties for business or commercial purposes.
|Categories of Personal Information||Collected in the last twelve (12) months:|
|Personal and online identifiers (such as first and last name, email address, or unique online) identifiers||Yes|
|Categories of information described in Section 1798.80(e) of the California Civil Code (such as physical characteristics or description, insurance policy number, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information)||Yes|
|Characteristics of protected classifications under California or federal law (such as race or gender)||Yes|
|Commercial or transactions information (such as records of personal property or products or services purchased, obtained or considered)||Yes|
|Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement)||Yes|
|Biometric information (such as call recordings)||Yes|
|Sensory information (such as audio, electronic, visual, thermal, olfactory, or similar information)||No|
|Professional or employment-related information||Yes|
|Non-Public Education information||No|
|Inferences drawn from the above information about your predicted characteristics and preferences||No|
|Other information about you that is linked to the personal information above||Yes|
Categories of Sources. We collect the categories of personal information listed above from the following categories of sources:
We disclose the categories of personal information designated above to the categories of third parties listed below for business purposes:
In the preceding twelve (12) months, we have not sold any personal information.
Your Rights Regarding Personal Information. California residents have certain rights with respect to the personal information collected by businesses. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:
To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:
Verification Process and Required Information. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may designate an authorized agent to make a CCPA request on your behalf by sending proof of an authorized agent to us at firstname.lastname@example.org. You may also make a verifiable consumer request on behalf of your minor child.
You may only make a verifiable consumer request for access or data portability twice within a twelve (12)-month period. The verifiable consumer request must:
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Note that we may need to request additional information from you to verify your identity or understand the scope of your request. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
Response Timing and Format. We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to the contact email address associated with that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the twelve (12)-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically by electronic mail communication.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Minors’ Right to Opt In. We do not collect or sell the personal information of minors under 16 years of age.