LAST UPDATED:  July 7, 2022

This California Consumer Privacy Act privacy policy is provided by Experian and its subsidiaries that either (1) act as a business within the meaning of the CCPA, or (2) are controlled by Experian plc, and use the Experian name. These companies are referred to in this policy as “we” or “us.” California law requires us to disclose to California residents’ certain information regarding the categories of personal information we collect. For purposes of this section, “personal information” has the meaning provided by the California Consumer Privacy Act (the “CCPA”) and may exclude certain information that is publicly available, deidentified, aggregated, subject to the Fair Credit Reporting Act, GLBA, HIPAA, or the Driver’s Privacy Protection Act of 1994, or otherwise exempt or excluded from the CCPA. 

Personal Information We Collect, Disclose, and Sell. We collect the categories of personal information about California consumers identified in the chart below. As further set forth in the chart below, in the past 12 months, we have disclosed and sold California consumers’ personal information to third parties for business or commercial purposes.

Categories of Personal Information

Collected in the last 12 months:

Categories of sources from which information has been collected:

Business or commercial purposes for collection, use, and sharing:

Disclosed for business purposes to the following categories of third parties:

May be sold to the following categories of third parties:

Personal and online identifiers (such as first and last name, postal address, telephone number, social security number, driver’s license, email address, or unique online identifiers)

Yes

• Lifestyle & Interest Product Companies
• Other Product Companies Not Categorized
• Parenting Product Companies
• Public Records
• Publishing Product Companies
• Telecommunications Companies
• Other Authorized Data Compilers
• Online & Mobile Websites & Apps

Commercial Purposes:
• Marketing

• Applying for insurance products
• Helping businesses find new customers
• Developing insights as to consumer interests and behaviors
• Keeping contact information up to date and relevant
• Enabling relevant and personalized marketing messages
• Location services
• Analytics
• Decisioning
• Fraud and identify theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery

Business Purposes:
• Auditing
• Internal research
• Quality control
• Improving our services
• Legal compliance
• Advertising and marketing products
• Communicate with consumers about our services
• To detect and protect against security incidents
• Cloud computing and storage
• Analytics Providers
• Social Publishers

• Information Security Companies
• Quality Control Companies
• Customer Service Companies
• Auditing Companies
• Service Providers

• Insurance companies

• Automotive Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Food & Beverage Companies
• Health Product Companies
• Insurance Companies
• Manufacturing Companies
• Marketing and Research Companies
• Media and Research Companies
• Not for Profit Organizations
• Political Organizations
• Public Institutions
• Regulatory Authorities or Law Enforcement
• Retail Companies
• Technology/Computer Software Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Categories of information described in Section 1798.80(e) of the California Civil Code (such as physical characteristics or description, insurance policy number, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information)

Yes

• Other Authorized Data Compilers
• Consumer Survey Companies

Commercial Purposes:
• Marketing

• Applying for insurance products


• Helping businesses find new customers
• Developing insights as to consumer interests and behaviors
• Keeping contact information up to date and relevant
• Enabling relevant and personalized marketing messages
• Location services
• Analytics
• Decisioning
• Fraud and identify theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery

Business Purposes:
• Auditing
• Internal research
• Quality control
• Improving our services
• Legal compliance
• Advertising and marketing products
• Communicate with consumers about our services
• To detect and protect against security incidents
• Cloud computing and storage
• Analytics Providers
• Social Publishers

• Information Security Companies
• Quality Control Companies
• Customer Service Companies
• Auditing Companies
• Service Providers

• Insurance Companies

• Automotive Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Food & Beverage Companies
• Health Product Companies
• Insurance Companies
• Manufacturing Companies
• Marketing and Research Companies
• Media and Research Companies
• Not for Profit Organizations
• Political Organizations
• Public Institutions
• Regulatory Authorities or Law Enforcement
• Retail Companies
• Technology/Computer Software Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Characteristics of protected classifications under California or federal law (such as race or gender)

Yes

• Parenting Product Companies
• Consumer Survey Companies
• Public Records
• Other Companies Not Categorized
• Other Authorized Data Compilers

Commercial Purposes:
• Marketing
• Helping businesses find new customers
• Developing insights as to consumer interests and behaviors
• Keeping contact information up to date and relevant
• Enabling relevant and personalized marketing messages
• Location services
• Analytics
• Decisioning
• Fraud and identify theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery

Business Purposes:
• Auditing
• Internal research
• Quality control
• Improving our services
• Legal compliance
• Advertising and marketing products
• Communicate with consumers about our services
• To detect and protect against security incidents
• Cloud computing and storage
• Analytics Providers
• Social Publishers

• Information Security Companies
• Quality Control Companies
• Customer Service Companies
• Auditing Companies
• Service Providers

• Automotive Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Food & Beverage Companies
• Health Product Companies
• Insurance Companies
• Manufacturing Companies
• Marketing and Research Companies
• Media and Research Companies
• Not for Profit Organizations
• Political Organizations
• Public Institutions
• Regulatory Authorities or Law Enforcement
• Retail Companies
• Technology/Computer Software Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Commercial or transactions information (such as records of personal property or products or services purchased, obtained or considered, vehicle information, insurance claims, insurance underwriting information)

Yes

• Apparel & Accessory Companies
• Gift Product Companies
• Health Product Companies
• Other Product Companies Not Categorized
• Parenting Product Companies
• Business to Business Companies
• Financial Services Companies
• Other Authorized Data Compilers
• Public Records
• Publishing Product Companies

Commercial Purposes:
• Marketing

• Applying for insurance products


• Helping businesses find new customers
• Developing insights as to consumer interests and behaviors
• Keeping contact information up to date and relevant
• Enabling relevant and personalized marketing messages
• Location services
• Analytics
• Decisioning
• Fraud and identify theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery

Business Purposes:
• Auditing
• Internal research
• Quality control
• Improving our services
• Legal compliance
• Advertising and marketing products
• Communicate with consumers about our services
• To detect and protect against security incidents
• Cloud computing and storage
• Analytics Providers
• Social Publishers

• Information Security Companies
• Quality Control Companies
• Customer Service Companies
• Auditing Companies
• Service Providers

• Insurance Companies

• Automotive Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Food & Beverage Companies
• Health Product Companies
• Insurance Companies
• Manufacturing Companies
• Marketing and Research Companies
• Media and Research Companies
• Not for Profit Organizations
• Political Organizations
• Public Institutions
• Regulatory Authorities or Law Enforcement
• Retail Companies
• Technology/Computer Software Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement)

Yes

• Apparel & Accessory Companies
• Automotive Companies
• Business to Business Companies
• Consumer Packaged Goods Companies
• Consumer Survey Companies
• Electronics Companies
• Financial Services Companies
• Food & Beverage Companies
• Gift Product Companies
• Health Product Companies
• Lifestyle & Interest Product Companies
• Not for Profit Organizations
• Online & Mobile Websites & Apps
• Other Authorized Data Compilers
• Other Product Companies Not Categorized
• Parenting Product Companies
• Public Records
• Publishing Product Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Commercial Purposes:
• Marketing
• Helping businesses find new customers
• Developing insights as to consumer interests and behaviors
• Keeping contact information up to date and relevant
• Enabling relevant and personalized marketing messages
• Location services
• Analytics
• Decisioning
• Fraud and identify theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery

Business Purposes:
• Auditing
• Internal research
• Quality control
• Improving our services
• Legal compliance
• Advertising and marketing products
• Communicate with consumers about our services
• To detect and protect against security incidents
• Cloud computing and storage
• Analytics Providers
• Social Publishers

• Information Security Companies
• Quality Control Companies
• Customer Service Companies
• Auditing Companies
• Service Providers

• Automotive Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Food & Beverage Companies
• Health Product Companies
• Insurance Companies
• Manufacturing Companies
• Marketing and Research Companies
• Media and Research Companies
• Not for Profit Organizations
• Political Organizations
• Public Institutions
• Regulatory Authorities or Law Enforcement
• Retail Companies
• Technology/Computer Software Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Biometric information (such as call recordings, facial recognition or retina/fingerprint scans)

No

N/A

N/A

N/A

N/A

Geolocation information

Yes

• Online & Mobile Websites & Apps
• Telecommunications Companies

Commercial Purposes:
• Marketing
• Helping businesses find new customers
• Developing insights as to consumer interests and behaviors
• Keeping contact information up to date and relevant
• Enabling relevant and personalized marketing messages
• Location services
• Analytics
• Decisioning
• Fraud and identify theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery

Business Purposes:
• Auditing
• Internal research
• Quality control
• Improving our services
• Legal compliance
• Advertising and marketing products
• Communicate with consumers about our services
• To detect and protect against security incidents
• Cloud computing and storage
• Analytics Providers
• Social Publishers

• Information Security Companies
• Quality Control Companies
• Customer Service Companies
• Auditing Companies
• Service Providers

• Automotive Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Food & Beverage Companies
• Health Product Companies
• Insurance Companies
• Manufacturing Companies
• Marketing and Research Companies
• Media and Research Companies
• Not for Profit Organizations
• Political Organizations
• Public Institutions
• Regulatory Authorities or Law Enforcement
• Retail Companies
• Technology/Computer Software Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Sensory information (such as audio, electronic, visual, thermal, olfactory, or similar information)

No

N/A

N/A

N/A

N/A

Professional or employment-related information

Yes

• Consumer Survey Companies
• Business to Business Companies

Commercial Purposes:
• Marketing

• Applying for insurance products


• Helping businesses find new customers
• Developing insights as to consumer interests and behaviors
• Keeping contact information up to date and relevant
• Enabling relevant and personalized marketing messages
• Location services
• Analytics
• Decisioning
• Fraud and identify theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery

Business Purposes:
• Auditing
• Internal research
• Quality control
• Improving our services
• Legal compliance
• Advertising and marketing products
• Communicate with consumers about our services
• To detect and protect against security incidents
• Cloud computing and storage
• Analytics Providers
• Social Publishers

• Information Security Companies
• Quality Control Companies
• Customer Service Companies
• Auditing Companies
• Service Providers

• Insurance Companies

• Automotive Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Food & Beverage Companies
• Health Product Companies
• Insurance Companies
• Manufacturing Companies
• Marketing and Research Companies
• Media and Research Companies
• Not for Profit Organizations
• Political Organizations
• Public Institutions
• Regulatory Authorities or Law Enforcement
• Retail Companies
• Technology/Computer Software Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Education information

Yes

• Public Records
• Other Authorized Data Compilers
• Consumer Survey Companies

Commercial Purposes:
• Marketing
• Helping businesses find new customers
• Developing insights as to consumer interests and behaviors
• Keeping contact information up to date and relevant
• Enabling relevant and personalized marketing messages
• Location services
• Analytics
• Decisioning
• Fraud and identify theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery

Business Purposes:
• Auditing
• Internal research
• Quality control
• Improving our services
• Legal compliance
• Advertising and marketing products
• Communicate with consumers about our services
• To detect and protect against security incidents
• Cloud computing and storage
• Analytics Providers
• Social Publishers

• Information Security Companies
• Quality Control Companies
• Customer Service Companies
• Auditing Companies
• Service Providers

• Automotive Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Food & Beverage Companies
• Health Product Companies
• Insurance Companies
• Manufacturing Companies
• Marketing and Research Companies
• Media and Research Companies
• Not for Profit Organizations
• Political Organizations
• Public Institutions
• Regulatory Authorities or Law Enforcement
• Retail Companies
• Technology/Computer Software Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Inferences drawn from the above information about your predicted characteristics and preferences

No

N/A

N/A

N/A

• Automotive Companies
 Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Food & Beverage Companies
• Health Product Companies
• Insurance Companies
• Manufacturing Companies
• Marketing and Research Companies
• Media and Research Companies
• Not for Profit Organizations
• Political Organizations
• Public Institutions
• Regulatory Authorities or Law Enforcement
• Retail Companies
• Technology/Computer Software Companies
• Telecommunications Companies
• Travel, Leisure & Entertainment Companies

Your Rights Regarding Personal Information. California residents have certain rights with respect to the personal information collected by businesses in the last 12 months. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

The right to know:

  • The categories and specific pieces of personal information we collect, use, disclose and sell about you;
  • The categories of sources of the personal information;
  • The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
  • The categories of personal information we have sold and the categories of third parties to whom the information was sold; and
  • The business or commercial purposes for collecting or selling the personal information.

The right to request that we delete the personal information we have collected from you.

We use a two-step process for online requests to delete. You will be asked to clearly submit your request to delete and to separately confirm your choice.

The right to opt out of our sale(s) of your personal information.

Please note that if you opt out of certain types of sales, we will be unable to provide you with the services that rely on such sales.

The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA.

To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:

  • Online at experian.com/ccpa
  • By phone at 1-833-210-4615
  • By mail at PO Box 703, Allen, TX 75013

To the extent that Experian sells or discloses deidentified patient information which is exempt from the CCPA under Section 1798.146(a)(4)(A)(i), it does so pursuant to the deidentification methodology described in Section 164.514(b)(2) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA safe harbor method.

Verification Process and Required Information. Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. In order to exercise your rights under the CCPA, we will require you to provide, at a minimum first name, last name, social security number, and address. For requests submitted by mail, you will need to send copies of two forms of identification that include your first name, last name and current address.

In certain circumstances, we may decline a request to exercise the right to know and/or right to deletion, particularly where we are unable to verify your identity.

Authorized Agent. You may designate an authorized agent to make a CCPA request on your behalf through the designated methods set forth in these Disclosures where we can verify the authorized agent’s authority to act on your behalf.

For requests to know or delete personal information: (i) receiving a power of attorney valid under the laws of California from you or your authorized agent; or (ii) receiving sufficient evidence to show that you have: (a) provided the authorized agent signed permission to act on your behalf; (b) verified your own identity directly with us pursuant to the instructions set forth in these Disclosures; and (c) directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf. This may be done by mailing two forms of identification showing your first name, last name and current address and a signed authorization allowing an agent to request information on your behalf.

Minors’ Right to Opt In. We do not sell the personal information of minors under 16 years of age.

Annual User Rights Request Metrics. The CCPA requires certain businesses to compile and disclose metrics on an annual basis regarding their compliance with the CCPA and consumer rights requests. The metrics must be posted by July 1 of each year. Experian has elected to report the required metrics on a calendar year basis for the period of January 1, 2021 through December 31, 2021. During the previous calendar year, Experian facilitated the following requests from California residents who submitted requests via our online portal, by phone or mail:

 

Experian

Tapad

Gabi

Requests to Know

Requests to Delete

Requests to Opt-Out

Requests to Know

Requests to Delete

Requests to Opt-Out [1]

Requests to Delete

Total Requests Received

1029

707

1300

29

182

1,591,681 [2]

213

Number of requests complied with in whole

1029

707

1300

3

0

1,591,681

213

Number of requests complied with in part

0

0

0

0

0

0

0

Number of requests denied due to inability to verify consumer [3]

0

0

0

26

182

0

0

Average number of days to substantively respond [4]

3.11

3.11

3.11

5

5

Immediately

5

[1] Opt-outs could not be filtered for CCPA or California residency

[2] Includes internal (Tapad privacy page) and Partner sites (DAA, NAI)

[3] Requests unable to be fulfilled due to unreturned Certification Form from consumer

[4] Average number of days our team responds to initial privacy request from consumer, providing Certification Form to be completed and returned

Contact for More Information. For questions or concerns about Experian’s privacy policy or practices, please contact us by mail at:

Compliance Department
Experian
475 Anton Blvd.
Costa Mesa, CA 92626