1.Scope and Applicability
This California Privacy Notice ("Notice") supplements BambooHR's Privacy Policy and applies solely to visitors, users, and others who reside in the State of California ("California Residents"). We adopt this Notice to comply with the California Consumer Privacy Act of 2018 ("CCPA") as amended by the California Privacy Rights Act of 2020 ("CPRA") and the regulations thereunder.
Any terms defined in the CCPA/CPRA have the same meaning when used in this Notice. Where there is a conflict between the Privacy Policy and this Notice as it relates to California Residents, this Notice shall control.
2.Categories of Personal Information We Collect
In the past twelve (12) months, we have collected the following categories of personal information: (a) Identifiers, such as name, email address, phone number, IP address, and account credentials; (b) Commercial information, such as subscription details, payment history, and products purchased; (c) Internet or other electronic network activity, such as browsing history on our website, search queries, and interactions with our website; (d) Geolocation data, limited to general location derived from IP address; (e) Professional or employment-related information, such as job title, company name, and industry; (f) Inferences drawn from the above to create a profile about preferences and characteristics.
If you are an employee of a BambooHR customer, your employer may submit additional categories of sensitive personal information through our HR platform. BambooHR processes that information on behalf of your employer as a service provider; please refer to your employer's privacy policy for details.
3.Purposes for Collection
We collect and use personal information for the following business purposes: providing and improving our services; operating and administering customer accounts; responding to customer enquiries and providing support; sending marketing communications and product updates; analysing usage patterns to improve website and product performance; detecting, investigating, and preventing fraudulent transactions and other illegal activities; and complying with our legal obligations.
We do not sell or share California consumers' personal information to third parties for monetary or other valuable consideration, nor do we use or disclose sensitive personal information for purposes beyond those permitted under the CCPA/CPRA.
4.Your California Privacy Rights
As a California Resident, you have the following rights under the CCPA/CPRA: (a) Right to Know: you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting the information, and the categories of third parties with whom we share the information; (b) Right to Delete: you may request that we delete personal information we have collected from you, subject to certain exceptions; (c) Right to Correct: you may request that we correct inaccurate personal information we maintain about you; (d) Right to Opt-Out of Sale or Sharing: you may opt out of the sale or sharing of your personal information.
(e) Right to Limit Use of Sensitive Personal Information: you may limit our use and disclosure of your sensitive personal information to the uses necessary to perform the services or provide the goods you requested; (f) Right to Non-Discrimination: we will not discriminate against you for exercising any of your rights under the CCPA/CPRA.
5.How to Submit a Rights Request
You may submit a verifiable consumer request to exercise your CCPA/CPRA rights by: submitting a request via our contact page with "California Privacy Request" in the subject line; or calling our toll-free number at 1-866-387-9595 and requesting to speak with our Privacy team.
We will acknowledge receipt of your request within ten (10) business days and will respond to a verifiable consumer request within forty-five (45) calendar days. If we require more time, we will notify you in writing of the reason and extension period (up to an additional 45 days).
6.Authorized Agent
You may designate an authorised agent to submit requests on your behalf. When an authorised agent submits a request, we may require you to verify your identity directly with us or provide written permission to the authorised agent, and we may deny a request from an agent who cannot demonstrate appropriate authorisation.
