Last Updated: September 11, 2025
The following disclosures are made pursuant to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 ("CCPA"). These disclosures supplement any privacy notices we previously or contemporaneously provided to you, including any California-specific privacy notice provided to you if you are an employee of Zinnia.
The CCPA guarantees certain rights to all California residents.
California residents have the right to be informed of the categories and specific personal information collected about them, including sensitive personal information, the categories of sources from which that information is collected, whether any information is sold or shared, the categories of third parties to whom that information has been shared, the business or commercial purposes for collecting and using each category of personal information, and the anticipated retention period for each category of personal information. See the chart below for the details:
| Personal Information Category set forth in Cal. Civ. Code § 1798.140 | Source(s) of Personal Information Collection | Business or Commercial Purpose(s) for Collection/Use | Third Parties, Service Providers, and Contractors Receiving Personal Information Category | Retention Period |
|---|---|---|---|---|
| Personal identifiers, including real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license or passport number, or other similar identifiers. | Directly from you; indirectly from you as you navigate or use our Services; advertising networks; internet or mobile service providers; employers; insurance companies; financial institutions; third-party administrators. For job applicants: recruiters; background check providers. | Provide you with our Services; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you. For job applicants: Assess your application; satisfy legal obligations. | Affiliates; advertising networks; social networks; technology service providers; customer relationship management providers; mobile application platforms; tag management platforms; payment processors; video sharing platforms; background check providers and human resources software providers (for job applicants). | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or [number] years post-relationship, whichever is longer. |
| California Customer Records personal information (Cal. Civ. Code § 1798.80(e)), including name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. | Directly from you; employers; insurance companies; financial institutions; third-party administrators. For job applicants: recruiters; background check providers. | Provide you with our Services; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you. For job applicants: Process your application; satisfy legal obligations. | Affiliates; advertising networks; social networks; technology service providers; customer relationship management providers; mobile application platforms; tag management platforms; background check providers and human resources software providers (for job applicants). | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or [number] years post-relationship, whichever is longer. |
| Characteristics of protected classifications under California or federal law. | Directly from you; indirectly from you as you navigate or use our Services; advertising networks; internet or mobile service providers; employers; insurance companies; financial institutions; third-party administrators. For job applicants: recruiters; background check providers. | Provide you with our Services; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you; meet our legal obligations. | Affiliates; advertising networks; social networks; technology service providers; customer relationship management providers; mobile application platforms; tag management platforms; video sharing platforms; background check providers and human resources software providers (for job applicants). | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or [number] years post-relationship, whichever is longer. |
| Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Directly from you; indirectly from you as you navigate or use our Services; advertising networks; internet or mobile service providers; employers; insurance companies; financial institutions; third-party administrators. | Provide you with our Services; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you; meet our legal obligations; maintain transaction records. | Affiliates; advertising networks; social networks; technology service providers; customer relationship management providers; mobile application platforms; tag management platforms; video sharing platforms. | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or [number] years post-relationship, whichever is longer. |
| Biometric information. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information about individual interactions with an Internet website, application, or advertisement. | Indirectly from you as you navigate or use our Services; advertising networks; internet or mobile service providers. | Detect security incidents; protect against malicious, deceptive, fraudulent, or illegal activity; verify, maintain, improve, upgrade, or enhance a service or device that is owned or controlled by us; identify and repair errors; advertise or marketing to you; perform analytics. | Advertising networks; social networks; technology service providers; mobile application platforms; tag management platforms; video sharing platforms. | Barring any legally required additional retention period, up to one year. |
| Geolocation data | Indirectly from you; devices you use to access our Services; advertising networks; internet or mobile service providers. | Protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you. | Advertising networks; technology service providers; mobile application platforms; tag management platforms; video sharing platforms. | Barring any legally required additional retention period, up to one year. |
| Sensory data including audio, electronic, visual, thermal, olfactory, or similar information. | We only collect audio through calls that flow from our contact center dialer, so we collect directly from you. | Provide you with our Services; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you; meet our legal obligations. | Customer relationship management providers, carriers. | We retain this category of data as legally required. |
| Professional or employment-related information. | Directly from you; employers; insurance companies; financial institutions; third-party administrators. For job applicants: directly from you; recruiters. | Provide you with our Services; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you. For job applicants: Process your application. | Affiliates; advertising networks; social networks; technology service providers; customer relationship management providers; mobile application platforms; tag management platforms; background check providers and human resources software providers (for job applicants). | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or [number] years post-relationship, whichever is longer. For job applicants: Barring any legally required additional retention period, up to [number] years for non-hired applicants. |
| Non-public education information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g; 34 C.F.R. Part 99) | For job applicants: directly from you; recruiters. | For job applicants: Process your application. | Background check providers and human resource software providers (for job applicants). | Barring any legally required additional retention period, up to [number] years for non-hired applicants. |
| Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Indirectly from you; devices you use to access our Services; advertising networks; internet or mobile service providers. | Advertise or market to you; perform analytics; maintain, improve, upgrade, or enhance a product or service. | Affiliates; advertising networks; social networks; technology service providers; customer relationship management providers; mobile application platforms; tag management platforms; video sharing platforms. | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or [number] years post-relationship, whichever is longer. |
| Sensitive Personal Information Category as set forth in Cal. Civ. Code § 1798.140 | Sources from which Information was Collected | Purposes for Collection; Use | Third Parties, Service Providers, and Contractors Receiving Personal Information | Retention Period |
|---|---|---|---|---|
| Social security number, driver's license number, state identification card, or passport number. | For job applicants: recruiters; background check providers. | For job applicants: Process your application; satisfy legal obligations. | Background check providers and human resources software providers (for job applicants). | Barring any legally required additional retention period, up to [number] years for non-hired applicants. |
| Account access credentials (user names, account numbers, or card numbers combined with required access code, security code or password to access an account). | Directly from you; indirectly from you as you navigate or use our Services; internet or mobile service providers. | Provide you with our Services; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors. | Technology service providers. | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or [number] years post-relationship, whichever is longer. |
| Precise geolocation (location within a geographical area of a circle with a radius of 1850 feet or less). | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Racial or ethnic origin | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Religious or philosophical beliefs | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Union membership | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Genetic Data | We do not collect. | We do not collect. | Not applicable. | Not applicable. |
| Mail, email, or text messages where the content is not directed to us. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Unique identifying biometric information | We do not collect. | We do not collect. | Not applicable. | Not applicable. |
| Personal information collected and analyzed concerning health. | We do not collect. | We do not collect. | Not applicable. | Not applicable. |
| Personal information collected and analyzed concerning sex life, or sexual orientation. | We do not collect. | We do not collect. | Not applicable. | Not applicable. |
We do not collect or process sensitive personal information for the purpose of inferring characteristics about consumers. We also do not disclose sensitive personal information for purposes other than those specified in section 7027(m) of the CCPA regulations promulgated by the California Privacy Protection Agency. Therefore, we do not offer consumers the option to limit the use of their sensitive personal information.
In the past twelve months we have used data about your activities on our online properties to serve you ads on online properties owned or controlled by third parties. In the past twelve months, we have provided the following categories of information to advertising networks, social media networks, tag management platforms, and video sharing platforms for this purpose:
Personal identifiers, such as unique personal identifier, online identifier, internet protocol address, device information and identifiers, and unique advertising identifiers and cookies; Internet and other electronic network activity information; geolocation information; inference data; characteristics of protected classifications under California or federal law; and commercial information.
If you would like to opt out of this sharing, you may exercise your right using our "Do Not Sell or Share My Personal Information" link, or by modifying your cookie settings, or, you may do so in a frictionless manner by activating Global Privacy Control ("GPC") opt out preference signal to opt out of disclosures of your personal information through the browser you are using. To learn more about the GPC, click here.
While we do not sell personal information in exchange for monetary consideration, we do share personal information for other benefits that could be deemed a "sale," as defined by the CCPA. The CCPA broadly defines "sale" in a way that may include activities such as the delivery of targeted advertising on websites or allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior.
In the past twelve months, we have provided the following categories of information to advertising networks, data analytics providers, and social media networks in ways that could be considered a "sale" under California law:
Personal identifiers, such as unique personal identifier, online identifier, internet protocol address, device information and identifiers, and unique advertising identifiers and cookies; Internet and other electronic network activity information; geolocation information; inference data; characteristics of protected classifications under California or federal law; and commercial information.
We disclosed these categories of information to these third parties in order to market and advertise our products and services; perform analytics; and to maintain, improve, upgrade, or enhance our products or services.
We have no actual knowledge of selling the personal information or the sensitive personal information or minors under 16 years of age.
California residents have the right to opt out of the "sale" of their personal or sensitive personal information.
If you would like to opt out of such disclosures, you may exercise your right using our "Do Not Sell or Share My Personal Information" link, or by modifying your cookie settings, or, you may do so in a frictionless manner by activating Global Privacy Control ("GPC") opt out preference signal to opt out of disclosures of your personal information through the browser you are using. To learn more about the GPC, click here.
You have the right to request the deletion of your personal information, subject to certain exceptions.
You have the right to request the correction of any inaccurate personal information that we maintain about you.
You have the right to request the categories and specific pieces of personal information we have collected about you.
You have the right to exercise the privacy rights conferred to you under the CCPA without receiving retaliatory or discriminatory treatment. Zinnia does not retaliate or discriminate against you for exercising the privacy rights conferred to you under the CCPA.
To exercise your rights, you may contact us via phone at [TOLL-FREE PHONE NUMBER] or via email at [EMAIL]. You may also submit a request through our website by [INSERT DESCRIPTION/LINK]. Requesters will need to provide us with personal information in order to verify their identity and residency, including name, email address, and state of residence. We will compare the information you provide with our internal records. The personal information that we use to verify identity and residency will not be used for any other purpose.
You may authorize an agent to submit a request on your behalf if you provide the authorized agent with written permission signed by you. Zinnia may require you to verify your identity directly with us and confirm that you provided the authorized agent with permission to submit a request on your behalf.
If you have questions or concerns about our privacy practices, contact us at:
Email: privacy@zinnia.com