LAST UPDATED: June 29, 2021
This section contains disclosures required by the California Consumer Privacy Act (“CCPA”) and applies only to “personal information” that is subject to the CCPA.
Personal Information We Collect, Disclose for a Business Purpose, and Sell. We collect the categories of personal information about California consumers identified in the chart below. As further set forth in the chart below, in the past 12 months, we have disclosed and sold California consumers’ personal information to third parties for business or commercial purposes.
| Categories of Personal Information | Collected in the last 12 months: | Categories of sources from which information has been collected: | Business or commercial purposes for collection, use, and sharing: | Disclosed for business purposes to the following categories of third parties: | May be sold to the following categories of third parties: |
| Personal and online identifiers (such as first and last name, email address, or unique online identifiers) | Yes | • Lifestyle & Interest Product Companies • Other Product Companies Not Categorized • Parenting Product Companies • Public Records • Publishing Product Companies • Telecommunications Companies • Other Authorized Data Compilers • Online & Mobile Websites & Apps |
Commercial Purposes: Business Purposes: |
• Information Security Companies • Quality Control Companies • Customer Service Companies • Auditing Companies • Service Providers |
• Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Research Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| Categories of information described in Section 1798.80(e) of the California Civil Code (such as physical characteristics or description, insurance policy number, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information) | Yes | • Other Authorized Data Compilers • Consumer Survey Companies |
Commercial Purposes: Business Purposes: |
• Information Security Companies • Quality Control Companies • Customer Service Companies • Auditing Companies • Service Providers |
• Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Research Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| Characteristics of protected classifications under California or federal law (such as race or gender) | Yes | • Parenting Product Companies • Consumer Survey Companies • Public Records • Other Companies Not Categorized • Other Authorized Data Compilers |
Commercial Purposes: Business Purposes: |
• Information Security Companies • Quality Control Companies • Customer Service Companies • Auditing Companies • Service Providers |
• Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Research Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| Commercial or transactions information (such as records of personal property or products or services purchased, obtained or considered) | Yes | • Apparel & Accessory Companies • Gift Product Companies • Health Product Companies • Other Product Companies Not Categorized • Parenting Product Companies • Business to Business Companies • Financial Services Companies • Other Authorized Data Compilers • Public Records • Publishing Product Companies |
Commercial Purposes: Business Purposes: |
• Information Security Companies • Quality Control Companies • Customer Service Companies • Auditing Companies • Service Providers |
• Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Research Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement) | Yes | • Apparel & Accessory Companies • Automotive Companies • Business to Business Companies • Consumer Packaged Goods Companies • Consumer Survey Companies • Electronics Companies • Financial Services Companies • Food & Beverage Companies • Gift Product Companies • Health Product Companies • Lifestyle & Interest Product Companies • Not for Profit Organizations • Online & Mobile Websites & Apps • Other Authorized Data Compilers • Other Product Companies Not Categorized • Parenting Product Companies • Public Records • Publishing Product Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
Commercial Purposes: Business Purposes: |
• Information Security Companies • Quality Control Companies • Customer Service Companies • Auditing Companies • Service Providers |
• Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Research Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| Biometric information (such as call recordings) | No | N/A | N/A | N/A | N/A |
| Geolocation information | Yes | • Online & Mobile Websites & Apps • Telecommunications Companies |
Commercial Purposes: Business Purposes: |
• Information Security Companies • Quality Control Companies • Customer Service Companies • Auditing Companies • Service Providers |
• Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Research Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| Sensory information (such as audio, electronic, visual, thermal, olfactory, or similar information) | No | N/A | N/A | N/A | N/A |
| Professional or employment-related information | Yes | • Consumer Survey Companies • Business to Business Companies |
Commercial Purposes: Business Purposes: |
• Information Security Companies • Quality Control Companies • Customer Service Companies • Auditing Companies • Service Providers |
• Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Research Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| Education information | Yes | • Public Records • Other Authorized Data Compilers • Consumer Survey Companies |
Commercial Purposes: Business Purposes: |
• Information Security Companies • Quality Control Companies • Customer Service Companies • Auditing Companies • Service Providers |
• Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Research Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| Inferences drawn from the above information about your predicted characteristics and preferences | No | N/A | N/A | N/A | • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Research Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
Your Rights Regarding Personal Information. California residents have certain rights with respect to the personal information collected by businesses. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:
- The right to know the categories and specific pieces of personal information we collect, use, disclose, and sell about you, the categories of sources from which we collected your personal information, our purposes for collecting or selling your personal information, the categories of your personal information that we have either sold or disclosed for a business purpose, and the categories of third parties with which we have shared personal information;
- The right to request that we delete the personal information we have collected from you.
We use a two-step process for online requests to delete. You will be asked to clearly submit your request to delete and to separately confirm your choice.
- The right to opt out of our sale(s) of your personal information. Please note that if you opt out of certain types of sales, we will be unable to provide you with the services that rely on such sales.
- The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA.
To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:
- Online at experian.com/ccpa
- By phone at 1-833-210-4615
- By mail at PO Box 703, Allen, TX 75013
To the extent that Experian sells or discloses deidentified patient information which is exempt from the CCPA under Section 1798.146(a)(4)(A)(i), it does so pursuant to the deidentification methodology described in Section 164.514(b)(2) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA safe harbor method.
Verification Process and Required Information. Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. In order to exercise your rights under the CCPA, we will require you to provide, at a minimum first name, last name, social security number, and address. For requests submitted by mail, you will need to send copies of two forms of identification that include your first name, last name and current address.
Authorized Agent. You may designate an authorized agent to make a CCPA request on your behalf by mailing two forms of identification showing your first name, last name and current address and a signed authorization allowing an agent to request information on your behalf.
Minors’ Right to Opt In. We do not sell the personal information of minors under 16 years of age.
Annual User Rights Request Metrics. The CCPA requires certain businesses to compile and disclose metrics on an annual basis regarding their compliance with the CCPA and consumer rights requests. The metrics must be posted by July 1 of each year. Experian has elected to report the required metrics on a calendar year basis for the period of January 1, 2020 through December 31, 2020. During the previous calendar year, Experian faciliatated the following requests from California residents who submitted requests via our online portal, by phone or mail:
| Requests to Know | Requests to Delete | Requests to Opt-Out | |
| Total Requests Received | 2712 | 1143 | 2080 |
| Number of requests complied with in whole | 2712 | 1143 | 2080 |
| Number of requests complied with in part | 0 | 0 | 0 |
| Number of requests denied due to inablity to verify consumer | 0 | 0 | 0 |
| Average number of days to substantively respond | 10.1 | 10.32 | 9.99 |
Contact for More Information. For questions or concerns about Experian’s privacy policy or practices, please contact us by mail at:
Compliance Department
Experian
475 Anton Blvd.
Costa Mesa, CA 92626