CCPA Notice

Effective Date: 18 October 2022

This CCPA Notice complements the Userpeek Privacy Policy and any agreements you have with Userpeek, such as the Tester Terms of Service and Customer Terms of Service. It applies to California-based visitors, Testers, customers, and users of Userpeek's Platform and Services. Any words used in this notice that are not specified here will have the meanings given to them in the applicable agreements.

The California Consumer Privacy Act (CCPA) is a privacy legislation that grants California customers a number of privacy protections. The law includes a clause that allows California citizens to opt out of the "sale" of their "personal information" by clicking a conspicuous link on the webpage of the "selling" party that reads "Do Not Sell My Personal Information." The CCPA exempts transfers to "service providers" from the definition of "sale."

This Notice provides California residents with extra details on the collection and use of their Personal Information.

Information collected and potential uses

Through our Site, Platform, and Services, we gather information that may be used to identify or characterize you, or that could be linked, directly or indirectly, to a specific consumer or device as defined by the CCPA ("Personal Information").

Collection

According to our Privacy Statement, Userpeek collects Personal Information from the following sorts of sources:

• Directly from you

• For instance, when you register to get information from Userpeek, when you create an account with UserTesting, or when you use our Platform or Services; and

• Indirectly via third-party sources

• By watching your behavior on our Site, including via the use of cookies, or through third parties.

Our Privacy Statement describes the objectives for which we utilize the Personal Data we collect. In our Privacy Policy and in this Notice, we refer to these as "Legitimate Business Purposes."

Examples

For example, we gather the Personal Information listed below from California users.

Identifiers - data that may be used to identify an individual

Examples include: a real name, unique personal identifier, online identifier, IP address, email address, account name

We employ Identifiers for all of our Legitimate Business Purposes.

Categories of Personal Information mentioned in the California Customer Records law (Cal. Civil Code 1798.80(e))

Examples include a name, signature, address, phone number, and employment information.

We use this category of information to provide you with access to and use of the Platform and Services, to improve and enhance your experience with the Platform and Services, and to understand how you access, use, and interact with the Platform and Services so that we can provide technical functionality, create new products and services, and analyze your use of them.

Protected class traits under California or federal law

Examples include: year of birth and gender

We use this category of information to improve and enhance your experience with the Platform and Services, and to understand how you access, use, and interact with the Platform and Services so that we can provide technical functionality, create new products and services, and analyze your use of them.

Business information

Examples include records of goods purchased or considered, as well as purchasing or consumption histories or patterns.

We use this information to receive and make payments, to improve and enhance your experience with the Platform and Services, and to understand how you access, use, and interact with the Platform and Services in order to provide technical functionality, create new products and services, and analyze your use of them.

Internet or comparable network activities

Examples include browser history and consumer engagement information with a website or application.

We use this category of information to improve and enhance your experience with the Platform and Services, and to understand how you access, use, and interact with the Platform and Services so that we can provide technical functionality, create new products and services, and analyze your use of them.

Geolocation data

Examples include geographic position and mobility.

This kind of information is utilized to prevent fraud and offer technical functionality.

Sensory data

Examples include video and audio records, including the capture of your face, voice, screen and device activity, and other visual data.

We use this category of information to provide you with access to and use of the Platform and Services, to improve and enhance your experience with the Platform and Services, and to understand how you access, use, and interact with the Platform and Services so that we can provide technical functionality, create new products and services, and analyze your use of them.

Userpeek will not collect additional categories of Personal Information or use Personal Information for fundamentally different, irrelevant, or incompatible purposes without your consent.

Sharing Personal Details

Userpeek may disclose your Personal Information for a Legitimate Business Purpose. When we disclose Personal Information for a Legitimate Business Purpose, we enter into a contract that specifies the purpose and requires the receiver to maintain the confidentiality of the Personal Information and not use it for any purpose other than providing services to us.

We release your Personal Information to the following types of third parties for Legitimate Business Purposes:

Hosting service providers, user engagement and customer support providers, job application service providers, payment service providers, communication tools, and analytics tools; Professional service providers, including auditors, attorneys, consultants, and insurance.

Our Privacy Policy contains more details on the sharing of Personal Information.

Transfer of Private Information

Userpeek has not sold any Personal Information as considered by the CCPA during the past twelve months.

Your Rights and Options

The CCPA grants particular rights to California consumers about their personal information. This section summarizes your rights under the CCPA and explains how to exercise them.

Access to Particular Information and Data Portability

You have the right to request Userpeek disclose specific information regarding our collection and use of your Personal Information during the preceding 12 months. Once we receive and validate your verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), we will provide you with the following information:

• The types of Personal Information that we have collected about you.

• The categories of sources from which we got your Personal Information.

• Our Authorized Business Reasons for Collecting or Selling Personal Information

• The categories of third parties we share Personal Information with.

• The exact Personal Data we have acquired about you (also called a data portability request).

• If we sold or disclosed your Personal Information for a Legitimate Business Purpose, we will provide two separate lists: sales, identifying the categories of Personal Information that each category of recipient purchased; and disclosures for a Legitimate Business Purpose, identifying the categories of Personal Information that each category of recipient obtained.

Rights to Request Removal

Subject to certain exclusions, you have the right to request that Userpeek erase any of your Personal Information that we gathered and maintained. Once we receive and confirm your genuine consumer request, we will remove your Personal Information from our records (and ask our service providers to do the same), unless an exception applies.

We may decline your request to delete your information if it is essential for us or our service provider(s) to maintain the data in order to:

• Complete the transaction for which we collected the Personal Information, provide a good or service that our customers purchase or request, take actions that are reasonably expected in the context of our ongoing business relationship with you, or otherwise carry out the terms of our agreement with you.

• Detect security problems, guard against harmful, misleading, fraudulent, or unlawful conduct, or bring those guilty for such actions to justice.

• Debug goods in order to find and correct faults that detract from their intended operation.

• Exercise your right to free speech, protect the freedom of another consumer to exercise their free speech rights, or exercise any other legal right.

• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).

• Participate in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the deletion of the information would likely render the research's completion impossible or severely impair it, if you have previously provided informed consent.

• Permit solely internal activities that are congruent with customer expectations based on our relationship.

• Comply with a legal requirement.

• Use this information for other internal and authorized purposes that are consistent with the context in which you submitted it.

The Exercise of Access, Data Portability, and Deletion Rights

To use the above-described access, data portability, and deletion rights, please submit a verifiable consumer request by sending an email to: privacy@userpeek.com

Only you or a person registered with the California Secretary of State that you allow to act on your behalf may submit a verifiable consumer request for your Personally Identifiable Information. Additionally, you may submit a request on behalf of your minor kid.

You may only submit two verifiable consumer requests for access or data portability per calendar year. The verified consumer request must:

Provide sufficient information for us to verify that you are the individual whose Personal Information we have acquired or an authorized representative.

Please include sufficient information for us to comprehend, assess, and reply to your request.

We are unable to reply to your request or provide you with Personal Information if we are unable to validate your identity or authorisation to make the request and confirm that the Personal Information requested pertains to you.

You do not need to register an account with us to submit a verifiable consumer request. We shall only utilize Personal Information submitted in a valid consumer request to confirm the identity or authority of the requestor.

Timing and Format of Responses

We strive to react to verified customer requests within forty-five (45) days of receiving them. If we require additional time (up to 90 days), we will notify you in writing of the cause and extended term.

Our written answer will be delivered via mail or online.

Our disclosures will only cover the 12-month period before the receipt of the verifiable consumer request. If applicable, our response will include an explanation of why we cannot comply with a request. For data portability requests, we shall choose a format to offer your Personal Information that is easily used and should allow you to send the data from one organization to another without difficulty.

We do not charge a fee to process or react to your verified consumer request unless it is ecessive, recurrent, or clearly without basis. If we find that the request requires a payment, we will explain our reasoning and offer a cost estimate prior to fulfilling your request.

Contact Information

Please contact us at privacy@userpeek.com if you have any questions or comments about this notice, the ways Userpeek collects and uses your information as described below and in this CCPA Notice, your choices and rights regarding such use, or if you wish to exercise your rights under California law.

GraviTech (“UserPeek”)
167 Madison Avenue
Ste 205 #174
New York City, NY 10016

Updated on 18 October 2022