The California Consumer Privacy Act (“CCPA” or the “Act”) confers new privacy rights for California consumers and imposes corresponding obligations subject to the Act. The rights conferred to consumers include the right to know: (1) the categories of personal information a business covered under the Act has collected about that consumer; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose for collecting or selling the personal information; (4) the categories of third parties with whom the covered business shares personal information; (5) the specific pieces of personal information the covered business has collected about that consumer; and (6) with respect to businesses that sell the consumer’s financial information, (a) the categories of personal information that the business sold about the consumer, (b) the categories of third parties to whom the personal information was sold, by category or categories of personal information for each category of third parties to whom the personal information was sold, and (c) the categories of personal information that the business disclosed about the consumer for a business purpose. The foregoing information must be provided to you with 45 days of receipt of a verifiable consumer request for said information.

 

Additional rights conferred to California consumers under the Act are: (1) the right to request that a covered business delete personal information collected from the consumer. Upon receipt of such a verifiable consumer request, the business must delete the consumer’s personal information from its records and direct any service providers to delete the consumer’s personal information from their records. California consumers further have the right to opt-out of having their personal information sold and, upon receipt of such a request, a covered business shall be prohibited from selling that consumer’s personal information. For consumers who exercise their right to opt-out of the sale of their personal information, the business must refrain from selling personal information collected by the business about the consumer and respect the consumer’s decision to opt-out for at least 12 months before requesting that the consumer authorize the sale of the consumer’s personal information. Lastly, consumers have the right to non-discrimination in service and price when exercising privacy rights.

 

 

As a consumer under the CCPA, you have the right to request that M1 Data reveal what personal information we collect, use, and disclose about you. We call this your “right to know.”

 

To take advantage of your right to know, you must submit a request by filling out a request on our online consumer portal found here.

 

You can also submit your request by mail or telephone. Our telephone number is 1-877-776-1195. Our mailing address is:

 

M1 Data LLC

1000 NW 65th Street, Suite 200

Fort Lauderdale, FL 33309

 

To respond to your right to know request, the CCPA permits M1 Data to verify your identity. We will do this by matching the personal information you supply us to the personal information we maintain about you. Given the sensitivity of some of the fraud detection and prevention data we have, we need to have a reasonably high degree of certainty you are the person you claim to be. This will require that you satisfactorily answer a series of authentication questions based on data we have about you. This may also require that you submit certain personal information for us to compare and match to data we have about you. If you call or mail us and request a consumer access report, an M1 Data associate will call you to administer an authentication test in which you will be required to answer certain questions to verify your identity.

 

M1 Data will delete the new information collected as part of the identity verification process as soon as practical after fulfilling your request.

 

If we are unable to satisfactorily verify your identity, we will be unable to fulfill your right to know request. In that case, please see the information below concerning M1 Data’s data collection, disclosure, maintenance, and sale practices.

 

Business and Commercial Purposes for which Personal Information is Collected: We collect personal information for our own business purposes, including internal research, internal operations, auditing, detecting security incidents, improving our services, quality control, and legal compliance. We also collect personal information for commercial purposes. M1 Data licenses the categories of personal information described below from the third-party sources categorized below in developing M1 Data’s marketing and advertising products as well as our fraud detection and prevention products as previously described. M1 Data licenses such data products to categories of third parties as described in the table below.