CCPA

Effective and Last Updated: December 21, 2020

We respect your concerns about privacy. This California Consumer Privacy Act ("CCPA") Privacy Notice (the "Privacy Notice") describes CCS Direct, LLC’s ("CCS") privacy practices with respect to personal information we collect or obtain about California residents who are covered by the CCPA.

Sources and Categories of Personal Information We Collect

When you visit our Sites, we may collect personal information directly from you. The categories of personal information we may collect from you when you visit our Sites are:

• Personal identifiers, such as a real name, alias, postal address, unique personal identifier, IP address, email address, account name, or other similar identifiers;
• Any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information, not including publicly available information that is lawfully made available to the general public from federal, state, or local government records.
• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a California resident’s interaction with an internet web site, application, or advertisement;
• Inferences drawing from any of the information above to create a profile.

We may also collect personal information directly from you and from other sources through offline means. This includes contact information (such as name, postal address, email address and telephone number), commercial information, publicly available information and demographic information, from public sources and third parties (such as data aggregators) who help facilitate our marketing, analytics and recruiting efforts.

Business or Commercial Purposes for Collecting Personal Information

We use the personal information you provide to us through our Sites for various business or commercial purposes. The purposes for which we use this personal information are described in the "What we collect and how we collect it" section of our Privacy Policy at https://shop.ccs.com/pages/privacy-policy.

We use the personal information we collect about you through offline means to: provide goods and services or otherwise transact business with you; provide you information about our products and services; conduct marketing and advertising; perform market research; perform data analytics; help enhance or improve our products and services; manage our recruiting efforts and career opportunities; prevent fraud; and perform IT and administrative support functions.

Categories of Third Parties with Whom We Share Personal Information

CCS does not and will not sell your personal information.

We may disclose your personal information to our subsidiaries and affiliates, and service providers, so we can provide you information about our products and services, as well as perform various business functions, such as data analytics, marketing and advertising, market research, mailings, recruiting and hiring, fraud prevention, and other IT and administrative support functions. The personal information disclosed to them may include your contact information (such as name, postal address, email address and telephone number), and demographic information. We do not authorize our service providers to use or disclose the information except as necessary to perform services or functions on our behalf, or to comply with legal requirements.

We also may share personal information with third parties: (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; or (6) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution or liquidation).

Rights Under the CCPA and How to Exercise Them

If you are a California resident whose personal information is covered by the CCPA and this Privacy Notice, you may have certain rights under the CCPA as listed below. We will comply with your request in accordance with, and to the extent permissible under, applicable law. You can exercise your rights listed below, or reach out to us with questions or concerns about our privacy policies and practices, by calling us at (800) 390-4988 or email us at ccpa@ccs.com. You will not receive discriminatory treatment by exercising any of your rights hereunder.

Access

You have the right to request that we disclose to you the following information about the last 12 months:

• The categories and specific pieces of personal information we have collected about you;
• The categories of sources from which your personal information was collected and of third parties with whom we have shared your personal information; and
• The business or commercial purpose for collecting or selling your personal information (we do not sell your personal information).

Deletion

You have the right to request that we and our service providers delete any personal information which we have collected from you. We and our service providers will not delete your personal information if it is necessary or permissible for us or our service providers to maintain the personal information pursuant to the CCPA or other applicable law.

Information About Our Sharing Of Personal Information

You have the right to request that we disclose to you the following information about the last 12 months:

• Whether we have sold your personal information (please note that we do not sell your personal information); and
• The categories of personal information we have disclosed about you for a business purpose and the categories of third parties to whom the personal information was disclosed.

When you submit a CCPA request, we will ask you to provide certain verification information, such as your name, phone number, postal address, email address, and date of birth. This information will be used to help us detect potential fraud, verify your identity, and fulfill and respond to your request. Upon receiving a CCPA request, we or our third party verification agent may contact you using the phone number you provide to further verify your identity and answer a few authentication questions.

If you decide to designate an authorized agent (other than through power of attorney) to submit a CCPA request on your behalf, we require that you provide the authorized agent written permission to do so and verify your own identity through the process described in the paragraph above. We also require the authorized agent to submit proof that you have authorized them to act on your behalf.