SCOPE OF NOTICE
This California Privacy Notice supplements the information contained in our Privacy Policy and applies solely to individual residents of the State of California ("consumers" or "you").This California Privacy Notice describes how we collect, use, disclose, and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”).
Unless otherwise expressly stated, all terms in this California Privacy Notice have the same meaning as defined in our Privacy Policy or or as otherwise defined the CCPA. “Personal Information” means information that, identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, consumer or household. For the purposes of this California Privacy Notice, personal information does not include:
SOME DEFINITIONS
“Personal Information” means information that, alone or when in combination with other information, may be used to readily identify, contact, or locate you, such as name, address, email address, and/or phone number. We do not consider Personal Information to include information that has been anonymized so that it does not allow a third party to easily identify a specific individual. We may also collect Personal Information in the future in connection with surveys, though we do not conduct these at the time of this posting. “Non-Personal Information” means information that does not identify any individual, including, without limitation IP type, IP host address, ISP address, cookie IDs and segment IDs associated with cookie IDs, pages viewed and/or search terms entered, browser type, operating system, duration and frequency of visits, anonymous usage statistics including frequency of messaging and interaction with other users, clickstream data other log file data, or social analytics and tracking measurements. On mobile devices, we may also collect device type, make and model, operating system, carrier, user ID, similar device IDs, and information about the apps you use.- • Publicly available information from government records.
- • Deidentified, aggregated or anonymized information that is maintained in a form that is not capable of being associated with or linked to a consumer.
- • Information excluded from the CCPA's scope, such as:
- o Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- o Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.
- • Information relating to our job applicants, employees, contractors and other Sunco personnel.
“Sensitive Personal Information” means certain information such as social security numbers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, personal communications, genetic data, and sexual orientation, which is classified as sensitive under the CCPA. We treat this data with extra caution and only process it for explicit and lawful purposes.
1. COLLECTION, TYPES, AND USE OF PERSONAL INFORMATION
Information we might collect from you is listed in the chart below. For more detail, please refer to Privacy Policy: Section 1 – Collecting Your Information. In the last 12 months, we have collected the following categories of personal information:| CATEGORY | SOURCE EXAMPLES | SOURCED FROM | COLLECTED | SOLD |
|---|---|---|---|---|
| Identifiers | Your name, postal address, phone number, email address, internet protocol (IP) address, or other similar identifiers | You, our business partners, third parties you direct to share information with us, social networks | YES | NO |
| California Customer Records (personal info categories listed in California Civ. Code § 1798.80(e)) | Contact information and payment information (credit card details or other financial information) | You, our business partners and/or affiliates, third parties you direct to share information with us, social networks | YES | NO |
| Protected Classification Characteristics under California or federal laws | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | You, our business partners and/or affiliates, third parties you direct to share information with us, social networks | NO, unless via employment | NO |
| Commercial Information | Shopping, online purchase history, whether you created a consumer or a business account | You, your web browser or device, or information generated from your online browsing and usage activity; | YES | NO |
| Biometric Information (per 1798.140 section of the California Consumer Privacy Act) | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | You | NO | NO |
| Internet or Network Activity Information | Browsing history, search history, log of customer interaction with website, application or advertisement | Your web browser or device, or information generated from your online browsing and usage activity; | YES | NO |
| Geolocation Data | Precise location information | Your browser or device | YES | NO |
| Sensory Data | Audio recordings of phone calls with us, where permitted by law | You | YES | NO |
| Non-Public Education Information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)) | Educational history and degree information (applicants) | Directly from you, from third parties where you share information with us | YES | NO |
| Other Personal Information | Social media posts, email contents | You, third parties you direct to share information from us, your browser or device | YES | NO |
| Inferences Drawn From Other Personal Information | Predictions or profiles about your interests and preferences | Your browser or device, information generated or derived from your online browsing and usage activity | YES | NO |
| Sensitive Personal Information | In some circumstances, we may collect [certain government-issued identifiers, such as social security number or driver’s license number,] in accordance with applicable law. | You | YES | NO |
2. DISCLOSURE OF PERSONAL INFORMATION
As described in Section3 – How Sunco Protects Your Information in our Privacy Policy, we protect your information by not selling it and by employing physical, technical, organizational, and administrative safeguards.As described in Section 2 – How Sunco Uses Your Information in our Privacy Policy, and in the chart above, we use Personal Information to facilitate and improve our services and communicate with you. We also use information to provide you with our products and services, including to fulfill your quote and order requests or to send you emails. You can opt out of emails in the footer of any marketing email you receive.
As described in Section 4 – Sunco May Disclose Your Information in our Privacy Policy, we may share your information:
- • to comply with legal obligations;
- • to protect and defend our rights and property; and
- • with your permission.
NOTE: We do not rent, sell, share Personal Information about you with other people or nonaffiliated companies for their direct marketing purposes. Here are the categories of third parties to whom we disclose personal information for a business purpose:
- • Service providers and advisors that perform services for us, on our behalf, which may include providing marketing and advertising services, providing mailing or email services, tax and accounting services, data enhancement services, fraud prevention, web hosting, or similar services;
- • Product Suppliers who may use the information to fulfill warranty service obligations, product recalls, or perform transaction tracking regarding shipments or leases of supplier products or similar activities;
- • Businesses as needed to provide Services or to fulfil your request or transaction, including, for example, order fulfilment, payment processing, or delivery or shipping services;
- • Ad networks and advertising partners to deliver advertising and personalized content to you on our Service, on other sites and services you may use, and across other devices you may use, as well as provide on behalf of advertising-related services such as reporting, attribution, analytics and market research;
- • Analytics providers to better understand the demographics of our users and visitors, and to personalize, enhance and improve our Service;
- • Social networks for advertising or personalization purposes, or to engage with you.
We may also disclose personal information to other third parties (at your direction or upon your request, or to comply with legal process or contractual obligations), as described in our Privacy Policy.
3. YOUR CALIFORNIA RESIDENT RIGHTS
As a California resident, you may be able to exercise the following rights in relation to the Personal Information collected (subject to certain limitations at law). Keep in mind that Sunco does not sell your Personal Information.| The Right to Know | You have the right to confirm whether we are processing personal information about you, and under California law only, to obtain certain personalized details about the personal information we have collected about you in the last 12 months), upon verification of your identity:
|
| The Right to Request Deletion | You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions. |
| The Right to Access and Portability | The right to obtain access to the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. |
| The Right to Correction | You have the right to request that any inaccuracies in your personal information be corrected, taking into account the nature of the personal information and the purposes of the processing of your personal information. |
| The Right to Opt Out of Personal Information Sales | You have the right not to receive discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process Personal Information (such as in the case of a deletion request), we may no longer be able to provide you our products and services or engage with you in the same manner as previously, such as needing an email to sign into your online account. |
| The Right to Non-Discrimination | You have the right not to receive discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process Personal Information (such as in the case of a deletion request), we may no longer be able to provide you our products and services or engage with you in the same manner as previously, such as needing an email to sign into your online account. |
| The Right to Limit Use and Disclosure of Sensitive Personal Information | You can limit the use and disclosure of your sensitive personal information. |
| “Shine the Light” | California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code § 1798.83). |
4. TO EXERCISE YOUR CALIFORNIA RESIDENT RIGHTS
To exercise your California Resident Rights, please submit a request by:
- • Filling out a California Resident Rights Request in this form, or
- • Call Customer Service at 844-334-9938, or
- • Email support@sunco.com and write “Data Subjects Rights Request” in the subject line.
We will need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your Sunco account online, if you have one. We will only use personal information provided in connection with a California Resident Rights Request to review and comply with the request. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
5. AUTHORIZED AGENTS
In certain circumstances, you are permitted to use an authorized agent (as that term is defined by the CCPA) to submit requests on your behalf through the designated methods set forth in this U.S. Notice where we can verify the authorized agent’s authority to act on your behalf.
For requests to know, delete, or correct personal information, we require the following for verification purposes:
- a. a power of attorney valid under the laws of California from you or your authorized agent; or
- b. sufficient evidence to show that you have:
- 1. provided the authorized agent signed permission to act on your behalf; and
- 2. verified your own identity directly with us pursuant to the instructions set forth in this U.S. Notice; or directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf.
For requests to opt-out of personal information “sales” or “sharing”, we require a signed permission demonstrating your authorized agent has been authorized by you to act on your behalf.
6. APPEALING PRIVACY RIGHTS DECISIONS
Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted using the California Resident Rights Request Form.
7. MINORS
We do not sell the personal information and do not have actual knowledge that we sell the personal information of minors under 16 years of age. If we wish to do so in the future, we will first seek affirmative authorization form either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age. Please contact us at support@sunco.com to inform us if you, or your minor child, are under the age of 16.If you are under the age of 18 and you want to remove your name or comments from our website or publicly displayed content, please contact us directly at support@sunco.com. We may not be able to modify or delete your information in all circumstances.
If you wish to submit a privacy request on behalf of your minor child in accordance with applicable jurisdictional laws, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and you are authorized to submit the request on your child’s behalf (i.e., you are the child’s legal guardian or authorized representative).
8. ADDITIONAL INFORMATION
Updates may be made to this California Privacy Notice page from time to time. We will change the last updated notice at the beginning of these disclosures. All changes shall be effective from the date of publication unless otherwise provided in this notification.
If you have questions or concerns about this notice and the details herein, or other privacy matters, please send an email to support@sunco.com.
