Categories of personal information collected over the 12 month period
prior to the effective date of the Data Controller’s Privacy Policy Note: The categories of data below stem from a statutory list set
forth under the CCPA. | Sources of collection over the 12 month period prior to the effective
date of the Data Controller’s Privacy Policy. | Categories of third parties with whom the Data Controller has
disclosed personal information for a business purpose over the 12 month
period prior to the effective date of the Data
Controller’s Privacy Policy. | Business or commercial purposes for which the personal information was
collected over the 12 month period prior to the effective date of
the Data Controller’s Privacy Policy. |
Identifiers such as name, alias, postal address, email address;
telephone number; IP address; device ID; cookies; username; identity
documents and other similar identifiers. | User; social media networks; business partners; affiliated companies;
data brokers. | Other Users; persons authorised by the User; affiliated companies;
payment providers; anti-fraud service providers; marketing partners; vendors
and professional advisers. | User account management; customer support; order and payment
processing; marketing and advertising services; analytics services; storage;
advertising audits; ad personalisation; security; fraud prevention;
debugging; research and development; service improvement; management of job
applications; management of relationships with vendors and professional
advisers. |
Signature, physical characteristics or description, state
identification card number, education, bank account number, credit card
number, debit card number, other financial information, and medical
information | User; affiliated companies. | Affiliated companies; vendors and professional advisers. | Job application management; identity verification; security; fraud
prevention; contractual and regulatory compliance. |
Characteristics of protected classifications under California law (such
as race, national origin, religion, age, sex, gender, sexual orientation,
marital status, disability, citizenship status, and military and veteran
status) | Users; consumer reporting agencies; social media
networks; affiliated companies. | Affiliated companies; vendors and professional advisers. | Job application management; regulatory compliance; fraud prevention;
security. |
Commercial information (records of personal property,
products or services purchased, obtained, or considered, and other purchasing
or consuming histories or tendencies). | User. | Payment service providers; anti-fraud service providers; vendors and
professional advisers. | Purchase and payment management; fraud prevention; customer support;
service analytics and improvement. |
Biometric information. | User via photo verification feature. | Payment service providers; anti-fraud service providers; vendors and
professional advisers. | Identity verification; fraud prevention; security. |
Internet and other electronic network activity information (browsing history, search history, and information regarding your interaction
with websites, applications or advertisements). | Directly from User; from other Users; advertising partners. | Vendors and professional advisers. | Behavioral analysis; marketing; service personalization; security;
performance improvement. |
Geolocation data | User’s device subject to his/her prior consent. | Vendors and professional advisers. | Provision of location-based services; security; service improvement. |
Audio, electronic and visual information and similar information (photos,
images and other multimedia content). | User; social media network; consumer reporting agencies; affiliated
companies. | Other Users; persons authorised by the User; affiliated companies;
marketing partners; vendors and professional advisers. | Service management; content sharing; fraud prevention; marketing;
security. |
Professional or employment-related information. | User; third parties involved in collaborations or recruitment
processes. | Other Users; persons authorised by the User; vendors and professional
advisers. | Management of applications; management of professional and contractual
relationships. |
Inferences drawn from any of the personal information listed
above to create a profile or summary about, for example, the User’s
preferences and characteristics, or a summary of those characteristics. | Processing of user profile data. | Vendors and professional advisers. | Service personalization; behavioral analysis; marketing; improvement
of the User experience. |
Contents of messages on Data Controller Services | User. | Vendors and professional advisers. | Provision of messaging features; customer support; security; service
monitoring and improvement. |