LAST UPDATED: July 7, 2022
This California Consumer Privacy Act privacy policy is provided by Experian and its subsidiaries that either (1) act as a business within the meaning of the CCPA, or (2) are controlled by Experian plc, and use the Experian name. These companies are referred to in this policy as “we” or “us.” California law requires us to disclose to California residents’ certain information regarding the categories of personal information we collect. For purposes of this section, “personal information” has the meaning provided by the California Consumer Privacy Act (the “CCPA”) and may exclude certain information that is publicly available, deidentified, aggregated, subject to the Fair Credit Reporting Act, GLBA, HIPAA, or the Driver’s Privacy Protection Act of 1994, or otherwise exempt or excluded from the CCPA.
Personal Information We Collect, Disclose, and Sell. We collect the categories of personal information about California consumers identified in the chart below. As further set forth in the chart below, in the past 12 months, we have disclosed and sold California consumers’ personal information to third parties for business or commercial purposes.
Categories of Personal Information |
Collected in the last 12 months: |
Categories of sources from which information has been collected: |
Business or commercial purposes for collection, use, and sharing: |
Disclosed for business purposes to the following categories of third parties: |
May be sold to the following categories of third parties: |
Personal and online identifiers (such as first and last name, postal address, telephone number, social security number, driver’s license, email address, or unique online identifiers) |
Yes |
• Lifestyle & Interest Product Companies |
Commercial Purposes: • Applying for insurance products Business Purposes: |
• Information Security Companies • Insurance companies |
• Automotive Companies |
Categories of information described in Section 1798.80(e) of the California Civil Code (such as physical characteristics or description, insurance policy number, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information) |
Yes |
• Other Authorized Data Compilers |
Commercial Purposes: • Applying for insurance products
Business Purposes: |
• Information Security Companies • Insurance Companies |
• Automotive Companies |
Characteristics of protected classifications under California or federal law (such as race or gender) |
Yes |
• Parenting Product Companies |
Commercial Purposes: Business Purposes: |
• Information Security Companies |
• Automotive Companies |
Commercial or transactions information (such as records of personal property or products or services purchased, obtained or considered, vehicle information, insurance claims, insurance underwriting information) |
Yes |
• Apparel & Accessory Companies |
Commercial Purposes: • Applying for insurance products
Business Purposes: |
• Information Security Companies • Insurance Companies |
• Automotive Companies |
Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement) |
Yes |
• Apparel & Accessory Companies |
Commercial Purposes: Business Purposes: |
• Information Security Companies |
• Automotive Companies |
Biometric information (such as call recordings, facial recognition or retina/fingerprint scans) |
No |
N/A |
N/A |
N/A |
N/A |
Geolocation information |
Yes |
• Online & Mobile Websites & Apps |
Commercial Purposes: Business Purposes: |
• Information Security Companies |
• Automotive Companies |
Sensory information (such as audio, electronic, visual, thermal, olfactory, or similar information) |
No |
N/A |
N/A |
N/A |
N/A |
Professional or employment-related information |
Yes |
• Consumer Survey Companies |
Commercial Purposes: • Applying for insurance products
Business Purposes: |
• Information Security Companies • Insurance Companies |
• Automotive Companies |
Education information |
Yes |
• Public Records |
Commercial Purposes: Business Purposes: |
• Information Security Companies |
• Automotive Companies |
Inferences drawn from the above information about your predicted characteristics and preferences |
No |
N/A |
N/A |
N/A |
• Automotive Companies |
Your Rights Regarding Personal Information. California residents have certain rights with respect to the personal information collected by businesses in the last 12 months. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:
The right to know:
- The categories and specific pieces of personal information we collect, use, disclose and sell about you;
- The categories of sources of the personal information;
- The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
- The categories of personal information we have sold and the categories of third parties to whom the information was sold; and
- The business or commercial purposes for collecting or selling the personal information.
The right to request that we delete the personal information we have collected from you.
We use a two-step process for online requests to delete. You will be asked to clearly submit your request to delete and to separately confirm your choice.
The right to opt out of our sale(s) of your personal information.
Please note that if you opt out of certain types of sales, we will be unable to provide you with the services that rely on such sales.
The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA.
To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:
- Online at experian.com/ccpa
- By phone at 1-833-210-4615
- By mail at PO Box 703, Allen, TX 75013
To the extent that Experian sells or discloses deidentified patient information which is exempt from the CCPA under Section 1798.146(a)(4)(A)(i), it does so pursuant to the deidentification methodology described in Section 164.514(b)(2) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA safe harbor method.
Verification Process and Required Information. Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. In order to exercise your rights under the CCPA, we will require you to provide, at a minimum first name, last name, social security number, and address. For requests submitted by mail, you will need to send copies of two forms of identification that include your first name, last name and current address.
In certain circumstances, we may decline a request to exercise the right to know and/or right to deletion, particularly where we are unable to verify your identity.
Authorized Agent. You may designate an authorized agent to make a CCPA request on your behalf through the designated methods set forth in these Disclosures where we can verify the authorized agent’s authority to act on your behalf.
For requests to know or delete personal information: (i) receiving a power of attorney valid under the laws of California from you or your authorized agent; or (ii) receiving sufficient evidence to show that you have: (a) provided the authorized agent signed permission to act on your behalf; (b) verified your own identity directly with us pursuant to the instructions set forth in these Disclosures; and (c) directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf. This may be done by mailing two forms of identification showing your first name, last name and current address and a signed authorization allowing an agent to request information on your behalf.
Minors’ Right to Opt In. We do not sell the personal information of minors under 16 years of age.
Annual User Rights Request Metrics. The CCPA requires certain businesses to compile and disclose metrics on an annual basis regarding their compliance with the CCPA and consumer rights requests. The metrics must be posted by July 1 of each year. Experian has elected to report the required metrics on a calendar year basis for the period of January 1, 2021 through December 31, 2021. During the previous calendar year, Experian facilitated the following requests from California residents who submitted requests via our online portal, by phone or mail:
|
Experian |
Tapad |
Gabi |
||||
Requests to Know |
Requests to Delete |
Requests to Opt-Out |
Requests to Know |
Requests to Delete |
Requests to Opt-Out [1] |
Requests to Delete |
|
Total Requests Received |
1029 |
707 |
1300 |
29 |
182 |
1,591,681 [2] |
213 |
Number of requests complied with in whole |
1029 |
707 |
1300 |
3 |
0 |
1,591,681 |
213 |
Number of requests complied with in part |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
Number of requests denied due to inability to verify consumer [3] |
0 |
0 |
0 |
26 |
182 |
0 |
0 |
Average number of days to substantively respond [4] |
3.11 |
3.11 |
3.11 |
5 |
5 |
Immediately |
5 |
[1] Opt-outs could not be filtered for CCPA or California residency
[2] Includes internal (Tapad privacy page) and Partner sites (DAA, NAI)
[3] Requests unable to be fulfilled due to unreturned Certification Form from consumer
[4] Average number of days our team responds to initial privacy request from consumer, providing Certification Form to be completed and returned
Contact for More Information. For questions or concerns about Experian’s privacy policy or practices, please contact us by mail at:
Compliance Department
Experian
475 Anton Blvd.
Costa Mesa, CA 92626