Privacy Notice for California Residents

This Privacy Notice applies only to consumers who reside in the State of California, and is provided pursuant to the California Consumer Privacy Act (CCPA). This Privacy Notice supplements CrossCheck, Inc.’s Privacy Policy, which may be accessed at https://www.cross-check.com/privacy-policy.

Personal Information We Collect, Use and Disclose

CrossCheck, Inc. collects personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.   

The following categories of personal information have been collected in the past twelve (12) months from consumers:

CrossCheck will not collect additional categories of or use the personal information collected for materially different, unrelated, or incompatible purposes without providing you notice.

Your Right to Request Access

You have the right to request that CrossCheck disclose certain information to you about the collection and use of your personal information over the past twelve (12) months.  You have the right to request any or all of the following:

• The categories of personal information collected about you.
• The categories of sources from which the personal information is collected.
• The business or commercial purpose for collecting or selling the personal information.
• The categories of third parties with whom CrossCheck shares personal information for a business purpose.
• The specific pieces of personal information collected about you.

To exercise these rights under the CCPA and submit a verifiable request, please see the section titled Exercising Access, Data Portability, and Deletion Rights.

Disclosure or Sale of Personal Information for a Business Purpose

CrossCheck does not and will not sell your personal information, other than for an activity subject to regulation under the Fair Credit Reporting Act, which is exempt under the CCPA.  CrossCheck does not and will not sell any personal information of minors. 

In the past twelve (12) months, CrossCheck has disclosed the categories of personal information summarized in the chart above.  CrossCheck requires that all personal information it discloses to a recipient be maintained in a confidential manner and used only for the business purpose of performing the contract for which it was provided. 

Your Deletion Request Rights

You have the right to request that CrossCheck delete any of your personal information that we collected from you and retained, subject to certain exceptions.  Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete), your personal information from our records, unless an exception applies.  CrossCheck may deny your deletion request if retaining the information is necessary for us or a service provider to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested or authorized, take actions reasonably anticipated within the context of an ongoing business relationship with you, or otherwise perform a contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act.
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Otherwise use the personal information internally in a lawful manner compatible with the context in which you provided it.

To exercise these rights under the CCPA and submit a verifiable request, please see the Section titled Exercising Access, Data Portability, and Deletion Rights.

Exercising Access, Data Portability, and Deletion Rights

To exercise your rights to access, data portability, and deletion described above, you may submit a verifiable consumer request to CrossCheck in the following ways:

• Clicking this link: https://www.cross-check.com/ca-request-for-info
• Calling us at 1-800-843-0760.
• Visiting https://www.cross-check.com/
• E-mailing us at privacy@cross-check.com

Only you, or a person authorized to act on your behalf, may make a verifiable consumer request related to your personal information.  You may also make a verifiable consumer request on behalf of your minor child.  You may only make a verifiable consumer request for access twice within a 12-month period.  The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. 

We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

CrossCheck will respond to a verifiable consumer request within forty-five (45) days of receiving it.  If additional time is required, we will inform you of the reason and extension period (an additional 45 days), in writing.  If you have an account with us, we will deliver our written response to that account.  If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.  Any disclosures we provide will cover just the twelve (12) month period preceding receipt of the verifiable request.  Our response will also explain the reasons we cannot comply with a request, if applicable.  For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We will not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.  If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with the cost before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.  Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Contact Information

If you have any questions or comments about this notice, the ways CrossCheck collects and uses your information described in this California Privacy Notice, your choices and rights regarding such use, exercising your rights, or would like to access this information in an alternate format, you may contact us at:

Phone: 1-800-843-0760
Website: https://www.cross-check.com/
Email:  privacy@cross-check.com
Mailing Address:

CrossCheck, Inc.
Attn: Privacy Inquiry Department
PO Box 6008
Petaluma, CA 94955-6008