Privacy Notice For California Consumers

Last updated: September 2023

​

This notice contains disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CPRA”). Terms defined in the CPRA have the same meaning when used in this notice. This notice is only relevant to California residents (“consumers” or “you”), and applies only to the collection or other use of "personal information" that is subject to the CRPA. Consumers with disabilities may access this notice by contacting us directly at operations@steadiew.com.

‍

Information We Collect.  In the past 12 months, we have collected and disclosed for a business purpose the following categories of personal information ("Personal Information"):

Personal Information does not include information that is publicly available, de-identified/ aggregated, or subject to Health Insurance Portability and Accountability Act (HIPAA) or the Gramm-Leach Bliley Act (GLBA).

We collect Personal Information from the following categories of sources:

• Your communications with us;
• By observing your actions on our website;
• Service providers, including, but not limited to administrators, lenders, banks, brokers, auditors, law firms, consultants, and employment agencies;  
• Affiliates not under the Steadview brand;
• Nonprofit organizations; and
• Government entities.

We do not knowingly collect, solicit or sell Personal Information from anyone under the age of 18.

‍

Purpose for Collection and Use of Personal Information.  We may collect or use Personal Information for one or more of the following purposes:

• Providing you with information about our products and services;
• Providing you with performance and other updates;
• One or more of the following business purposes:
  
  • Performing services (for us or our service provider or contractor) such as account servicing, processing orders and payments, and analytics;
  • Legal compliance;
  • Detecting and protecting against security incidents, fraud, and illegal activity;
  • Internal operations;
  • Activities to maintain and improve our services; and
  • Short-term, transient use, such that the personal information is not disclosed to another third party and is not used to build a profile about you.

The use of sensitive Personal Information is limited to only those purposes authorized under the CPRA.

‍

Disclosing Personal Information.  We may disclose Personal Information to:

• Service providers, including but not limited to administrators, lenders, banks, brokers, auditors, law firms, consultants, and employment agencies;
• Affiliates;
• Business partners;
• Legal or government regulatory authorities as required by applicable law;
• In connection with a potential business transfer; and
• Third parties to whom you or your agents authorize us to disclose such information in connection with services we provide to you.

In the past 12 months, we have not sold or shared (for cross-context behavioral advertising) Personal Information to third parties.

‍

Length of Time. We will keep your Personal Information for as long as necessary to comply with our regulatory obligations.

Rights of California Consumers.  The CPRA provides a California consumer the following rights, subject to certain exceptions and limitations:

• The right to request: (a) the categories and specific pieces of Personal Information we collect about you; (b) the categories of sources from which we collect your Personal Information; (c) our business or commercial purposes for collecting, selling or sharing your Personal Information; (d) the categories of Personal Information disclosed for a business purpose or shared with third parties (for cross-context behavioral advertising) and the categories of persons to whom it was disclosed or shared; (e) the categories of your Personal Information (if any) that we have either sold, shared, or disclosed.
• The right to request that we delete your Personal Information, subject to certain exceptions.
• The right to opt out of our sale(s) (if any) of your Personal Information to third parties or sharing with such third parties for the purpose of cross-context behavioral advertising.
• The right to request we correct any inaccurate Personal Information maintained about you.
• The right to limit our use of your sensitive personal information to only use that is necessary to perform the services expected or provide the goods reasonably expected.
• The right not to receive discriminatory treatment for exercising your CPRA rights.

‍

You may submit requests relating to your exercise of CPRA rights to us via:

Email at Operations@steadview.com

​

You may only make a verifiable request for access or data portability twice within a 12-month period. All verifiable requests must provide (1) enough information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized agent and (2) sufficient detail that allows us to properly evaluate and respond to it. We may need to request additional information from you to verify your identity or understand the scope of your request.  If we are unable to verify your identity, we will need to deny your request. You may designate an authorized agent to make a CPRA request on your behalf and we reserve the right to seek proof that you have given the authorized agent signed permission to act on your behalf.

We endeavor to respond to a verifiable request within 45 days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option.

Questions

If you have questions regarding this Notice, please contact us at Operations@steadview.com