CCPA — Do Not Sell or Share My Personal Information

This notice supplements our Privacy Policy and applies to California residents. It describes the categories of personal information we handle, your rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and how to exercise them.

1. Categories of personal information we collect

• Identifiers — name, business email address, business phone number, IP address;
• Professional or employment-related information — employer, job title, department, seniority, work location;
• Commercial information — records of content downloaded, events registered for, and services enquired about;
• Internet activity — interactions with our website and email campaigns.

We do not collect biometric, geolocation, health, financial account, or other sensitive personal information, and we do not knowingly collect information about anyone under 18.

2. Sources and purposes

We collect this information directly from you, from publicly available professional sources, from licensed data providers, and from clients who engage our services. We use it for the business purposes described in our Privacy Policy: providing B2B marketing and data services, verifying record accuracy, responding to enquiries, and securing our website.

3. Selling and sharing

We do not sell personal information for monetary consideration in the everyday sense, and we do not "share" personal information for cross-context behavioral advertising. However, the CCPA defines "sale" broadly, and certain disclosures of business contact records to clients in exchange for consideration may qualify. California residents therefore have, and may exercise, the right to opt out.

To opt out: email info@onerootprotech.com with the subject line "Do Not Sell or Share My Personal Information", including the name and business email address you want suppressed. We will action the request within 15 business days and confirm when complete. Opt-outs are permanent unless you later ask us to reverse them.

4. Your CCPA rights

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, purposes, and third parties to whom it was disclosed;
• Right to delete — request deletion of your personal information, subject to legal exceptions;
• Right to correct — request correction of inaccurate personal information;
• Right to opt out — direct us not to sell or share your personal information;
• Right to limit — we do not use or disclose sensitive personal information, so no limitation request is necessary;
• Right to non-discrimination — we will never deny services, charge different prices, or provide a different level of service because you exercised your rights.

5. How to submit a request

Email info@onerootprotech.com with the subject "CCPA Request", stating which right you wish to exercise and the business email address concerned. We will verify your identity — typically by confirming control of the email address on record — and respond within 45 days, extendable by a further 45 days with notice. You may also use an authorized agent; we will require proof of the agent's authority and may still verify your identity directly.

6. Retention

We retain each category of personal information only as long as reasonably necessary for the purposes disclosed above, as detailed in the retention section of our Privacy Policy. Suppression records are kept indefinitely so an opt-out is never forgotten.

7. Contact

Questions about this notice or your California privacy rights: info@onerootprotech.com.