The California Consumer Privacy Act (CCPA) of 2018 gave California residents more control over their personal information. The broad applicability of the law expanded the definition of personal information to include biometric data, internet browser history, and geolocation data. In November 2020, California voters passed ballot Proposition 24, the California Privacy Rights Act of 2020 (CPRA). This act not only amends existing CCPA language but also affords California residents knowledge of data collected from them by a company’s service provider (Vendor), of data classified as sensitive personal information (e.g., social security number, driver’s license number), as well as their employment data requests.
Your Rights
Californians have the right:
-
To know what personal information and sensitive personal information is being collected about them, both by category and by specific information
-
To access their information
-
To know whether their personal information is being sold or otherwise disclosed, and to whom
-
To have their personal information deleted in certain circumstances
-
To non-discrimination
-
To correct their information
-
To limit the use and disclosure of their sensitive personal information
To request a personal information report, or to delete the data Octopus may have collected about you, please email us (for customers, former customers, non-customers, or minors of customers). Once a request is received, Octopus will review the information and validate your identity against our records. If your identity is validated and you have requested a report, you will receive it within 45 calendar days of submittal or be notified if an additional 45 calendar days are needed to fulfill your request. If your identity is validated and you have requested that data be deleted (subject to certain exceptions), you will receive a response within 45 calendar days.
Retention Policy of Personal Information
We retain both your personal information and sensitive personal information for as long as reasonably necessary to fulfill the transactions you have requested or for legitimate business purposes, such as complying with our legal obligations, including United States federal, state, and local laws. Retention periods vary for different types of personal information and sensitive personal information, according to the business purpose.
If you believe Octopus incorrectly denied a request for your personal information report or request to delete data, you may appeal by contacting Octopus at: