CA Notice at Collection

Privacy Information for California Residents

If you are a California resident, the California Consumer Privacy Act (“CCPA”) requires us to provide you with the
following notice (“Notice”) with information about:

  • the purpose for which we use each category of “personal information” (as defined in the CCPA) we collect; and
  • the categories of third parties to which we (a) disclose such personal information for a business purpose, (b)
    “share” personal information for “cross-context behavioral advertising,” and/or (c) “sell” such personal
    information.

As described in our , Arity 875 often acts as “service provider” with respect to the services it provides its Business
Clients. This means Arity 875 processes personal information provided to us by our Business Clients (i.e., the
“businesses”) on behalf of that Business Client.

However, in some instances, Arity 875 acts as a “business,” and we will process personal information in accordance with
our Privacy Statement. The charts below summarize how we collect, use, and disclose personal information in such
instances by reference to the statutory categories specified in the CCPA, and describes our practices during the 12
months preceding the effective date of this Privacy Statement. The information we collect varies based on the Services
you use and how you interact with us. Please note that this Notice does not apply to personal information that is exempt
from the CCPA and/or that is collected and used through the Insurance Client Services.See our for more detailed
description of the categories included the chart.

Business Client Services & Advertising Services
Statutory Category of Personal Information (PI) Source of Personal Information

 

Purpose of Collection Categories of third parties to whom we “disclose” the PI for a business
purpose
 
Identifiers
  • Consumers
  • Business Clients
  • Advertisers
  • Data Providers
  • Create, deliver, and facilitate provision of the Services to you
  • Improve, develop, and analyze our Services
  • Communicate with you
  • Provide marketing communications
  • Display online advertising
  • Comply with legal requirements and protect the safety and security of our business, Services, and Websites
  • Create de-identified and/or aggregated Information
  • Affiliates
  • Business Clients
  • Advertisers
  • Service Providers
Internet or other electronic network activity information
  • Same as for Identifiers
  • Same as for Identifiers.
  • Same as for Identifiers.
General geolocation data
  • Consumers
  • Business Clients
  • Data Providers

 

  • Same as for Identifiers.
  • Same as for Identifiers.
Precise geolocation data
  • Consumers
  • Business Clients
  • Create, deliver, and facilitate provision of the Services to you
  • Improve, develop, and analyze our Services
  • Comply with legal requirements and protect the safety and security of our business, Services, and Websites
  • Create de-identified and/or aggregated Information
  • Affiliates
  • Service Providers

 

Inferences
  • Same as for Identifiers.
  • Same as for Identifiers.
  • Same as for Identifiers.

 

Lead Generation Services & Arity Websites
Statutory Category of Personal Information (PI) Source of Personal Information

 

Purpose of Collection Categories of third parties to whom we “disclose” the PI for a business
purpose
 
Identifiers
  • Consumers
  • Advertisers
  • Data Providers
  • Create, deliver, and facilitate provision of the Services to you
  • Improve, develop, and analyze our Services
  • Communicate with you
  • Provide marketing communications
  • Display online advertising
  • Comply with legal requirements and protect the safety and security of our business, Services, and Websites
  • Create de-identified and/or aggregated Information
  • Affiliates
  • Advertisers
  • Service Providers
  • Lead Generation Partners (as part of the services requested by the consumer)
Personal characteristics (e.g., age, marital status, gender and other demographic
information)
  • Consumers
  • Data Providers
  • Create, deliver, and facilitate provision of the Services to you
  • Improve, develop, and analyze our Services
  • Communicate with you
  • Display online advertising
  • Comply with legal requirements and protect the safety and security of our business, Services, and Websites
  • Create de-identified and/or aggregated Information
  • Same as for Identifiers

Note that we do not disclose personal characteristics that are considered “sensitive personal
information” under the CCPA with Advertisers.

Commercial information
  • Consumers
  • Data Providers
  • Create, deliver, and facilitate provision of the Services to you
  • Improve, develop, and analyze our Services
  • Communicate with you
  • Display online advertising
  • Comply with legal requirements and protect the safety and security of our business, Services, and Websites
  • Create de-identified and/or aggregated Information
  • Same as for identifiers
Internet or other electronic network activity information
  • Same as for identifiers
  • Same as for identifiers
  • Same as for Identifiers
General geolocation data
  • Consumers
  • Data Providers
  • Create, deliver, and facilitate provision of the Services to you
  • Improve, develop, and analyze our Services
  • Communicate with you
  • Display online advertising
  • Comply with legal requirements and protect the safety and security of our business, Services, and Websites
  • Create de-identified and/or aggregated Information
  • Same as for Identifiers
Inferences
  • Same as for Identifiers
  • Same as for Identifiers
  • Same as for Identifiers

Please note that we may also disclose personal information to governmental authorities in response to valid,
governmental requests in accordance with our Privacy Statement and disclosure policies.

Your Choices Regarding “Sharing” and “Selling”

Under the CCPA, “sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal
information obtained from the consumer’s activity across distinct online services, and “selling” is defined as the
disclosure of personal information to third parties in exchange for monetary or other valuable consideration. As noted
in the “Cookies and Online Advertising” of our Privacy Statement, we engage in
certain targeted advertising activities for which you have a right to opt out. As part of these activities, we “share”
the following categories of personal information with advertisers to provide more relevant and tailored advertising to
you:

  • Business Client Services & Advertising Services: Identifiers, internet or other electronic network activity
    information, general geolocation information, and inferences
  • Lead Generation Services & Arity Websites: Identifiers, personal characteristics (please note that we don’t
    “share” personal characteristics that are considered “sensitive personal information” under the CCPA),
    commercial information, Internet or other electronic network activity information, general geolocation
    information, and inferences

While we do not sell personal information for monetary consideration, online targeted advertising may be considered a
“sale.”

You have the right to opt out of oursale/sharing of your personal information for purposes of online analytics and
advertising by clicking the“Your Privacy Choices” link in our
website footer.

Right to Limit

The CCPA allows you to limit the use or disclosure of your “sensitive personal information” (as defined in the CCPA) if
your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive
personal information other than for business purposes for which you cannot opt out under the CCPA.

Consumer Request Metrics

The following lists the number of access, deletion, correction and data sale/share opt out requests Arity received,
complied with and denied from residents of California in 2024 and the average number of days it took to complete a
request. Please note that these metrics do not include requests made to our Business Clients.

2024 Data Access Requests
Number of requests received 20
Number of requests complied with in whole or in part 1
Number of requests denied 19
Average days to complete a request 5

 

 

2024 Data Deletion Requests

Number of requests received 24
Number of requests complied with in whole or in part 12
Number of requests denied 12
Average days to complete a request 12
 

2024 Data Correction Requests

Number of requests received 0
Number of requests complied with in whole or in part 0
Number of requests denied 0
Average days to complete a request 0
 

2024 Data Sale/Share Opt Out Requests*

Number of requests received 18,485
Number of requests complied with in whole or in part 18,485
Number of requests denied 0
Average days to complete a request 7

*Number includes all “CCPA Opt Out Tool” global opt out requests received by the DAA’s AppChoices tool.

California “Shine the Light” Disclosure

California’s “Shine the Light” law gives residents of California, under California Civil Code § 1798.83, the right to
opt out of our disclosure of certain categories of “personal information” (as defined in the Shine the Light law) to
third parties for their marketing purposes. To exercise this right, please contact us by email at: privacy@arity.com and state clearly that you want to exercise your rights under
“Shine the Light.”

California “Do Not Track” Notice

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing
you with meaningful choices about the information collected on our websites for third-party purposes, and that is why we
provide the opt-out mechanisms listed above, and in our Privacy Statement. Some web browsers offer users a “Do Not
Track” privacy preference setting in the web browser. We do not currently recognize or respond to browser-initiated Do
Not Track signals. Please note that “Do Not Track” is a distinct privacy mechanism from the browser-based “Global
Privacy Control,” signal which we do honor in accordance with applicable law.