This California Privacy Notice is updated and effective as of: April 15, 2024
This California Privacy Notice (“Notice”) is for California residents and supplements our FloQast Site privacy policy. If you are a California resident with whom we have a direct business or potential business relationship, this Notice applies to you. It explains how we collect, use, and share your Personal Information and how to exercise your rights under the California Consumer Privacy Act, California Privacy Rights Act, and its implementing regulations (collectively, the “CPRA”) Terms (including capitalized terms) used in this Notice have the same meanings given in the CPRA, unless otherwise defined.
Exercising Your California Rights
Under the CPRA, you have the following rights if you are a resident of California:
- Right to Know: You have the right to request that we disclose to you the Personal Information we collect, use, or disclose, including the right to request that we provide to you the categories and specific pieces of Personal Information we have collected about you;
- Right to Request Deletion: You have the right to request that we delete your Personal Information that we have collected about you;
- Right to Opt-Out of Sharing: to opt-out from the sharing of your Personal Information to a third party for cross-context behavioral advertising (i.e., targeted advertising).
- Right to Opt-Out of Sale: You have the right to opt out of the sale of personal information. FloQast does not sell website data to third parties.
- Right to Correct: You have the right to correct inaccurate personal information we hold about you.
- Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit use and disclosure of Sensitive Personal Information, including that use which is necessary and anticipated to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services.
All rights above are subject to the meanings and exceptions set forth in the CPRA. More information on each of these rights is below.
In your request, you must provide enough information to allow us to verify you are the person about whom we collected personal information, or their authorized representative. You must also describe your request with enough detail so that we can understand, evaluate, and respond to it. Please note, we can’t respond to your request if we can’t verify your identity. Making such a request does not require you to create an account with us, and we will only use the information you provide in a request to verify your identity.
Verifying Your Requests
We will take reasonable steps to verify your identity based upon the information you provide and the type of request you are making. When you exercise your Right to Know, Right to Delete, and/or Right to Correct, we may ask that you provide us with information, beyond your full name, in order to verify your identity and fulfill your request. If we are unable to verify that the individual submitting the request is the same individual about whom we have collected information (or someone authorized by that individual to act on their behalf), we will not be able to process the request.
Agents
Under the CPRA, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf.
If you are an authorized representative submitting a request on a consumer’s behalf, please complete the applicable request per the instructions below. We will follow up to request a signed, written permission signed by the individual who is the subject of the request authorizing you to make the request on their behalf. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request and needs to be clear about the permission granted. Alternatively, you may submit a copy of a power of attorney under Probate Code sections 4000-4465. In either case, please also indicate in your email the nature of your request. The California resident’s identity, in addition to your own, will need to be independently verified in order for us to be able to fulfill your request. We may also ask the California resident to directly confirm with us that they provided you permission to submit a request. Please keep in mind that if we do not receive adequate proof that you are authorized to act on the California resident’s behalf, we may deny the request.
Right to Know
California residents have the right to know what information we have collected about you (the categories and the specific pieces of information).
If you are a California resident with whom we have a direct business or potential business relationship and would like to exercise your Right to Know, please submit your request by emailing us at compliancerequests@floqast.com.
In order to have us provide specific pieces of information, we may require a signed declaration under penalty of perjury that you are the California resident whose Personal Information is the subject of the request.
Right to Delete
California residents have the right to request that we delete information we have collected from you. If you are a California resident with whom we have a direct business or potential business relationship and would like to exercise your Right to Delete, please submit your request by emailing us at compliancerequests@floqast.com.
Please note that as part of the verification process, once you submit a request to delete, we may follow up and require you to confirm that you want your information deleted.
Right to Correct Inaccurate Information
California residents have the right to request that we correct inaccurate information we hold about you. If you are a California resident with whom we have a direct business or potential business relationship and would like to exercise your Right to Correct, please submit your request by emailing us at compliancerequests@floqast.com.
Do Not Sell or Share for Cross Context Behavioral Advertising
California residents have the right to opt-out of the sale and sharing of your personal information to a third party for cross-context behavioral advertising (i.e., targeted advertising). Note that FloQast does not sell your personal information for monetary benefit. If you are a California resident and would like exercise your Right to Opt-Out of the Sale/Sharing of your personal information, please submit your request by emailing us at compliancerequests@floqast.com.
FloQast engages in online advertising practices (and certain analytics or similar activities), which may be considered a “sale” or “share” for cross-context behavioral advertising as defined in the CPRA. To opt out of certain tracking cookies set by 3rd parties that may be considered “sales” or “sharing” under the CPRA, please modify your cookie settings by clicking on the cookie pop-up window appearing on the bottom left-hand corner of the website or by clicking the “Do Not Sell or Share My Personal Information” link in our website footer.
In addition, the Digital Advertising Alliance also offers tools for California residents to send requests under the CPRA to opt out of the sale of personal information by some or all of the participating companies: https://www.privacyrights.info/.
Data Retention
We retain Personal Information for only as long as it is reasonably necessary for the purposes set out in this Notice and our privacy policy, considering the time period reasonably necessary to: provide the Site to you, exercise the choices and rights you have requested, comply with our contractual obligations, enforce our Terms of Use found on the Site, and comply with legal and regulatory requirements. Except where we have otherwise disclosed or agreed, we retain your personal information while you have an account with us, or while you are using the Site or our services or continuing to interact with us.
Data Deletion (and Destruction)
Personal data is deleted using secure deletion methods including, but not limited to, digital shredding of encryption keys and hardware destruction in accordance with relevant guidelines and applicable laws.
Users Younger than 18
FloQast does not knowingly collect, share, or sell Personal Information of users younger than 18 years of age.
Right to Non-Discrimination for the Exercise of Privacy Rights
California residents have the right to not receive discriminatory treatment for exercising CPRA rights. We will not discriminate against you for exercising your CPRA rights.
How We Collect, Use, and Share Personal Information
The Personal Information we collect about you will depend upon how you use the Site or otherwise interact with us. Accordingly, we may not collect all of the below information about you.
In addition to the below, we may collect and/or use additional types of information and will do so after providing notice to you and obtaining your consent to the extent such notice and consent is required by the CPRA.
- Identifiers - First name, last name, title, company name, business address, country phone number, IP address, ERP system and e-mail address. This information is collected from the following sources: You; Your Company; Affiliated and Sister Companies; Cookies and Tracking Technologies; Colleagues; Third-party business partners and data providers.
- Customer Records - First name, last name, signature, employer, address, phone number, job title, Additional categories of information described in the California Privacy Notice. This may overlap with other categories. This information is collected from the following sources: You; Your Company; Affiliated and Sister Companies; Cookies and Tracking Technologies; Colleagues; Third-party business partners and data providers.
- Commercial Information - Services purchased, obtained, or considered from FloQast. This information is collected from the following sources: You; Your Company; Affiliated and Sister Companies; Cookies and Tracking Technologies; Colleagues; Third-party business partners and data providers.
- Internet or Other Electronic Network Activity - Cookies, web server logs, web beacons, and other website tracking information or user activity. This information is collected from the following sources: You; Your Company.
- Professional or Employment - Occupation, title, and employer information. This information is collected from the following sources: You.
- Audio, Electronic, Visual or Similar Information - Photos and videos you submit for testimonials. This information is collected from the following sources: You.
- De-Identified Data - Personal information de-identified so that it is non-personal, such as by aggregating or converting it to a code. This information is collected from the following sources: You; Your Company.
Business or Commercial Purposes for Collection: To enable you to use the Site or other products and services we offer; To manage and develop our business relationship with you and the company for which you work; to contact you with regard to your use of the Site or similar administrative communications; To provide customer service; To send you information and promotional materials about us, and the Site, features, products, and activities and that of our third party partners that we think may be of interest to you; To provide, maintain, personalize, optimize and improve our products and Site; To research and analyze the performance and functioning of the Site; Operate and protect the Site from errors and misuse of the Site, investigating and preventing fraud, illegal activities, and activities that violate our policies, and resolving technical issues; For other purposes disclosed to you at the time you provide your information, or otherwise with your consent.
Categories of Third Parties This is Disclosed to for a Business Purpose: subsidiaries, affiliates; your company; service providers; third parties or affiliated companies when you agree to or direct that we share your information with them; third parties who may acquire your information as a result of a merger, acquisition, or other ownership transition; law enforcement, government entities, or others if required by law or in connection with court proceedings (such as pursuant to subpoenas or court orders); third party analytics companies.
Categories of Third Parties to Whom Personal Information is Sold/Shared for Cross Context Behavioral Advertising: third-party analytics, advertising, and other similar marketing partners may have access to your identifiers, commercial information, internet or other electronic network activity, including to better serve you more relevant advertisements, and this may be considered a considered a “sale” or “share” under the CPRA in certain circumstances.
Characteristics of Protected Classifications
FloQast does not collect characteristics of protected classifications under CA or federal law.
