Privacy Statement-california
This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Policy of WSO2 LLC, and its subsidiaries (collectively, “we,” “us,” or “our”) and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Any terms defined in the CCPA have the same meaning when used in this notice.
-
Information We Collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:
-
Identifiers. This category includes information such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or account name. We collect Identifiers from you directly when you enter information into forms on our website or when you communicate with WSO2 employees, automatically when you visit our website, and, in some circumstances, from third parties. We use these Identifiers to supply our products and services to you, to comply with law, to improve our products and services, for recruitment, to communicate with you about our products and services, to analyze traffic to our website, for billing, and to enforce agreements with our customers.
We shared Identifiers with Service Providers, Partners & Resellers, and third parties to whom you or your agents authorize us to disclose your personal information in connection with the products or services we provide to you.
-
Financial Information. This category includes information such as a bank account number, credit card number, or debit card number. We collect Financial Information directly from you and use this information to provide services to you and our customers, and for billing.
We shared Financial Information with Service Providers and third parties to whom you or your agents authorize us to disclose your personal information in connection with the products or services we provide to you.
-
Professional Information. This category includes information such as your title and where you work. We collect Professional Information to provide services to you and our customers, to improve our products or services, for recruitment, to communicate with you about our products and services, to provide support to our customers, and to enforce agreements. Professional Information is collected directly from you and sometimes obtained from third parties.
We shared Professional Information with Service Providers, Partners & Resellers, and third parties to whom you or your agents authorize us to disclose your personal information in connection with the products or services we provide to you.
-
Internet or other similar network activity.This category includes information such as browsing history, information on how you interact with our website and services, location information, or device information. We collect this information for marketing, analytics, communicate with you about our products and services, and to provide customer support.
We shared Internet or similar network activity with Service Providers and third parties to whom you or your agents authorize us to disclose your personal information in connection with the products or services we provide to you.
-
We may retain your personal information for a period of time consistent with the original purpose of collection (see above) or as long as required to fulfill our legal obligations. We determine the appropriate retention period for personal information on the basis of the amount, nature, and sensitivity of the personal information being processed, the potential risk of harm from unauthorized use or disclosure of the personal information, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).
After expiry of the applicable retention periods, your personal information will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of such data.
-
Disclosure or Sale of Personal Information
-
Disclosure of Personal Information
We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
- Identifiers
- Financial Information
- Professional Information
- Internet or other similar network activity
We disclose your personal information for a business purpose to the following categories of third parties
- Service Providers
- Partners & Resellers
- Third parties to whom you or your agents authorize us to disclose your personal information in connection with the products or services we provide to you.
-
Sale or Sharing of Personal Information
We may occasionally sell or share your personal information to our partners or resellers who help us to sell our products and services to customers. By “sell,” we mean to say that we sometimes share contact information of potential customers with our partners and resellers who may profit from selling or reselling our services to you. Our partners and resellers agree in writing to keep the information we share with them confidential. We do not sell or share the personal information of minors under 16 years of age without their affirmative authorization or, if 13 or under, the affirmative authorization of their parent or guardian. We do not have actual knowledge that we have sold or shared the personal information of any minor under 16 years of age. In the preceding twelve (12) months, we have sold and/or shared the following categories of personal information to partners and resellers:
In the preceding twelve (12) months, we have sold the following categories of personal information to partners and resellers:
- Identifiers
- Professional Information
-
Sensitive Personal Information
The categories of personal information that we collect and disclose for a business purpose include “sensitive personal information” as defined under CCPA. We do not disclose sensitive personal information for any purpose not expressly permitted by CCPA.
-
-
Your Rights and Choices
The CCPA provides consumers with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
-
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you any or all of the following:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information we collected about you (also called a data portability request).
- If we have disclosed your personal information for a business purpose, the categories of personal information disclosed.
- If we have sold your personal information, the categories of personal information sold.
-
Deletion Request Rights
You have the right to request that we delete any of your personal information that we collect from you and retain, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
-
Right to Correct Inaccurate Personal Information
You have the right under the CCPA to request to correct inaccurate personal information that you have provided to us.
-
Personal Information Sale or Sharing Opt-Out and Opt-In Rights
We may occasionally sell or share your personal information with our partners and resellers. You have the right to direct us to not sell or share your personal information at any time (the “right to opt-out”). Consumers who opt-in to personal information sales or sharing may opt-out of future sales or sharing at any time.
Once you have made an opt-out request, we will wait at least twelve (12) months before we ask you to reauthorize personal information sales or sharing. However, you may opt back in to personal information sales or sharing at any time by visiting our website and sending us a message. We will only use personal information provided in an opt-out request to review and comply with the request.
To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting Do Not Sell or Share My Info and sending us a message.
-
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
-
-
Exercising Access, Data Portability, Deletion/Correction Rights and opt-out rights
To exercise the access, data portability, deletion and correction rights described above, you may submit a request to us through the request form. If you wish to opt-out, in addition to submitting the request form, you can use the optout box below and insert the email address and click submit.
Phone: 1-833-500-6629
Website: wso2.com/california-privacy
Address: 3080 Olcott Street, Suite C220, Santa Clara, CA 95054
Opt-Out
If you want to opt out please insert your mail and submit:
Submit a Request
If you have any other request please submit this form:
When you make a request, we will ask you to provide, at a minimum, your first name, last name, email address, and the type of request you are making. We require this information from you so that we can verify your identity or authority to make this request and confirm that the personal information relates to you. We cannot respond to your request if we are unable to verify your identity.
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
-
Response Timing and Format
We will endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by email. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
-
Changes to Our Privacy Notice
We reserve the right to amend this privacy notice at our discretion and at any time.
-
Contact Information
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Phone: 1-833-500-6629
Website: wso2.com/contact
Address: 3080 Olcott Street, Suite C220, Santa Clara, CA 95054
Date last updated: June 29, 2023