Last Modified: August 5, 2024
Certain United States laws require us to disclose certain information related to our privacy practices. This State-Specific Privacy Notice (this “Notice”) supplements the information and disclosures contained in the SourceScrub Privacy Policy (the “Privacy Policy”) available here: https://www.sourcescrub.com/legal/ privacy-policy. The Notice applies to all visitors, users and other individuals residing in California, Virginia, Colorado, Connecticut and Utah from whom we collect Personal Information. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy.
A. California Privacy Rights. The California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2020 (CPRA) (together, "CCPA") requires covered businesses to provide California residents with some additional information regarding how they collect, use, and share your "personal information" (as defined in the CCPA). SourceScrub is currently a covered business under the CCPA and we value privacy and strive to be transparent with our customers. As such, we have provided additional details below about the information we collect, how we disclose it, and how you can exercise your privacy rights under the CCPA, in the event it applies to our activities in the future.
(i) Categories of Personal Information that is Collected, Disclosed and Shared. The CCPA provides California residents with the right to know what categories of personal information covered businesses have collected about them and whether such businesses have disclosed that personal information for a business purpose (e.g., to a service provider) in the preceding 12 months.
We may use any of the categories of information listed above for other business or operational purposes compatible with the context in which the personal information was collected. The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth in the Privacy Policy.
We may share any of the information listed above with service providers, which are companies that we engage for business purposes to conduct activities on our behalf. Service providers are restricted from using personal information for any purpose that is not related to our engagement.
(ii) "Sales or Sharing" of Personal Information under the CCPA. California residents have the right to opt out of the "sale" of their personal information. Under the CCPA, "sale" is defined broadly and includes the transfer of personal information by a business to a third party for valuable consideration (even if there is no exchange of money).
SourceScrub may "sell or share" personal information. The categories of personal information we have "sold" and the categories of third parties we have "sold or shared" personal information to in the preceding twelve months are listed below:
SourceScrub’s business and commercial purposes for "selling or sharing" personal information can be found in the Privacy Policy. SourceScrub does not have actual knowledge of any "sale" of personal information of minors under 18 years of age.
(iii) Additional Privacy Rights for California Residents.
1. Opt-out of "Sales or Sharing" California residents may opt-out of the "sale or sharing" of their personal information by contacting us as set forth in "Contact Information" section of the Privacy Policy. California residents (or their authorized agent) may also exercise your right to limit the disclosure of your sensitive personal information, by clicking on this "Limit the Use of My Sensitive Personal Information" link.
2. California Shine the Light. The California "Shine the Light" law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to exercise any of your rights under the law, please contact us as set forth in "Contact Information" section of the Privacy Policy. We will process such requests in accordance with applicable laws.
B. Virginia, Colorado, Connecticut and Utah Privacy Rights. Residents of Virginia, Colorado, Connecticut and Utah may have additional rights under relevant privacy laws, including under the Virginia Consumer Data Protection Act (“VCDPA”), Colorado Privacy Act (“CPA”), Connecticut Data Privacy Act (“CTDPA”) (effective July 1, 2023) and Utah Consumer Privacy Act (“UCPA”) (effective Jan. 1, 2024), as applicable. The following additional information is required to be provided by covered businesses under applicable state laws.
(i) Sharing of Personal Data under VCDPA, CPA, CTPDA and UCPA. The VCDPA, CPA, CTPDA and UCPA require covered businesses to provide residents of their respective states with the right to know the categories of “personal data” (as defined under applicable law) covered businesses shared with third parties and the categories of third parties with whom such personal data has been shared. Residents of Virginia, Colorado, Connecticut and Utah can find this information below:
(ii) “Sales” or Sharing for Targeted Advertising under VCDPA, CPA, CTPDA and UCPA. Residents of Virginia, Colorado, Connecticut and Utah have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising. For purposes of this paragraph the definition of “sale”, “sell” or “sold” has the meaning set forth in applicable privacy law. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. Do Not Sell My Personal Information The categories of personal data “sold” or processed for targeted advertising can be found below:
Changes to this Notice
We reserve the right to update this Notice from time to time in order to reflect, changes to our practices or for other operational, legal, or regulatory reasons. When we do update this Notice, we will post the updates and changes on our website. We may elect to notify you of material changes by mail, email, posting of the modified Notice, or some other similar manner. However, it is your responsibility to check our website regularly for changes to this Notice. Your continued use of or access to the Services following the posting of any changes to this Notice constitutes acceptance of those changes.
