Endato Notice at Collection

U.S. State Supplemental Privacy Notice

This U.S. State Supplemental Privacy Notice (“Supplemental Notice“) supplements our main Privacy Notice (collectively, our “Privacy Statements“) and applies to residents of U.S. states with comprehensive privacy legislation, such as the California Consumer Privacy Act of 2018, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, and other similar laws that may be enacted (each, a “State Privacy Law“). Our Privacy Statements explain how we collect, use, and disclose information that identifies you or could reasonably be used to identify you (referred to in this Supplemental Notice as “personal information“).

Enformion, LLC is the primary entity responsible for the personal information you provide or that is collected through our Services, as detailed in our Privacy Notice.

Key Points to Understand:

1. Data Sources: Our Data Products typically consist of information collected from publicly available sources and third parties. Some of this information is subject to the Gramm-Leach-Bliley Act and the Driver’s Privacy Protection Act, among other requirements (referred to as “Regulated Data“).

1. Use of Regulated Data: Data Products containing Regulated Data are used for specific purposes such as fraud protection and identity verification. Before accessing Regulated Data, our customers must complete a credentialing process to ensure compliance with applicable laws

1. State Privacy Laws: While our Privacy Statements include certain information about our collection and use of Regulated Data and publicly available information, this type of data is generally not covered by State Privacy Laws.

If you have a disability that prevents or limits your ability to access our Privacy Statements, please contact us by visiting our Contact Page or calling us at 855-281-3915. We will work with you to provide the notices in an alternative format.

1. Collection and Disclosure of Personal Information. The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth in the “Personal Information We Collect” (Section 2) and “How We Use Personal Information” (Section 3) of our Privacy Notice.

The tables below describe the categories of personal information we have collected and the entities to whom we may have disclosed that personal information for business purposes, as well as those to whom we have “sold” or “shared” that personal information. For more details on why we may share, sell, or disclose personal information to each of the third parties listed, please refer to the “How We Disclose Your Personal Information” (section (Section 4) of our Privacy Notice.

• Personal Information That May Be Disclosed for a Business Purpose

• Personal Information That May Be Sold

• Personal Information That May Be Shared

2. Retention of Personal We store the personal information we collect for as long as necessary to fulfill the purpose(s) for which it was collected and for other purposes described in the “Retention of Personal Information“section (Section 9) of our Privacy Notice.

3. We Do Not “Sell” or “Share” Personal Information of Children. We do not have actual knowledge that we “sell” or “share” personal information about consumers under 18 years of age either as those terms are commonly understood or as they are defined under U.S. state privacy laws.

4. Your Privacy Rights

• Consumer If you live in a U.S. state and are an individual with rights granted under an applicable State Privacy Law, you may be eligible to request to exercise the privacy rights, as detailed further in our Privacy Notice. For your convenience, we have summarized certain key points below.

• Request to Know. You may have the right to request confirmation of whether we are processing or have processed your personal information. Additionally, you may be able to request disclosure of the personal information we have collected about you, including:

• The categories of personal information we have collected

• The categories of sources from which such personal information is collected

• The business or commercial purposes for collecting, selling, or sharing your personal information

• The categories or specific third parties to whom we disclose or have disclosed your personal information

• The specific pieces of your personal information that we maintain or have processed

• Request to Delete. You may have a right to request that we delete the personal information that we may maintain about you.

• Request to Correct Inaccurate Personal Information. You may have the right to request thatwe correct our copy of your personal information where it is inaccurate or incomplete.

• Request to Opt-Out of Sale, Sharing, and Certain Profiling Activities. As explained in our Notice of Right to Opt-Out of Sale and Sharing of Personal Information, you may have the right to opt out of certain activities involving your personal information. Specifically, you can opt out of our “sale” of your personal information to third parties, the “sharing” of your personal information for targeted or cross-context behavioral advertising, and certain profiling activities that result in legal or similarly significant effects on you. However, please note that we do not use personal information for such profiling activities.

As explained above, our Data Products include Regulated Data and publicly available information, which is generally not covered by U.S. state privacy laws. This includes data from public records. If you request to opt out of the sale of your personal information, we will try to apply your request to the publicly available information we collect, as a courtesy. However, this will not remove the data from its original source. This means your information may still appear on other websites or be accessible through other services. Also, we regularly receive new public records so even if you opt out, your publicly available information may appear in our Data Products again in the future. We recommend you periodically refresh your opt-out request using the methods described below.

• Request to Limit. You have the option to request a limitation on the use of your Sensitive Personal Information for profiling or inferring characteristics about you or others. However, the Sensitive Personal Information we collect, as that term is defined by applicable state privacy laws, is not utilized for these purposes. Therefore, this request does not apply to our business.

• Right to No Discrimination. You have a right not to receive discriminatory treatment for the exercise of your privacy rights.

• Exercising Your Privacy Rights.

• Request to Know, Delete, or Correct Your Personal Information. If you want to know what personal information we have about you, delete it, or correct it, you can reach out to us in two ways:

• Online: Visit our Privacy Portal

• Phone: Call us at 855-281-3915

• Request to Opt Out. To opt out of the selling or sharing of your personal information, please choose one of the following methods:

• Online: Visit our Opt-Out Form

• Phone: Call us at 855-281-3915

Additionally, you must adjust your cookie settings or send an opt-out preference signal, such as the Global Privacy Control, to prevent the selling or sharing of personal information that may occur through the Collection Technologies we use. For detailed instructions, please refer to the “Collection Technologies Preferences“section (Section 6) of our Privacy Notice.

• How We Process Requests. We will process your requests in accordance with applicable laws and subject to the following:

• Verification Methods.Once you submit a request, we will verify that you are the consumer to which the request pertains by matching the identifying information provided by you (g., name, email address, phone number) to the information we maintain. Depending on the type of request you submit, we will attempt to match either two or three of the data points you provided. If we are unable to verify your request with the data points you provided, we may reach out to you for additional information to verify your request. Please note that opt-out requests do not require verification.

• Authorized Agent.Your “authorized agent” can submit a request on your behalf using the same methods described above. We may ask the authorized agent to provide a signed authorization from you, confirming their authority to act on your behalf. Additionally, we might require you to verify your own identity directly with us.

• You may have the right to appeal our decision or response to your request. To exercise your right to appeal, please visit our Contact Page or call us at 855-281-3915.

5. California Metrics Reporting. We compile and disclose specific metrics regarding the number of CCPA privacy requests we received and processed during the previous calendar year.
   [add this section from existing privacy policy inline, see screenshot]
   

6. Texas Data Broker Disclosure.

• WE ARE A DATA BROKER REGISTERED UNDER TEXAS LAW. TO CONDUCT BUSINESS IN TEXAS, A DATA BROKER MUST REGISTER WITH THE TEXAS SECRETARY OF STATE (TEXAS SOS). INFORMATION ABOUT DATA BROKER REGISTRANTS IS AVAILABLE ON THE TEXAS SOS WEBSITE AT HTTPS://WWW.SOS.STATE.TX.US/INDEX.SHTML.

7. Contact Us. We welcome your inquiries and comments. If you have questions about our information practices or registrations, please contact us by visiting our Contact Page or by calling us at 855-281-3915.

8. We may update our Privacy Statements periodically, noting the date of revision at the top. If we make any material changes in the way we collect, use, and/or disclose personal information, we will endeavor to provide you with notice before such changes take effect, such as by posting a prominent notice on our website.