Your Privacy is important to us!
California Privacy Notice For California Consumers
Notice of Collection and Use of Personal Information
We may collect (and may have collected during the 12-month period prior to the effective date of this Statement) the following categories of personal information about you:
Identifiers. Identifiers such as a real name, postal address, unique personal identifiers (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number, passport number, and other similar identifiers;
Additional Data Subject to Cal. Civ. Code § 1798.80. Signature, physical characteristics or description, state identification card number, education, bank account number, credit card number, debit card number, and other financial information;
Protected Classifications. Characteristics of protected classifications under California or federal law, such as race, color, national origin, age, sex, gender, marital status, citizenship status, and military and veteran status;
Commercial Information. Commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consumer histories or tendencies;
Online Activity. Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications, or advertisements;
Geolocation Data. We use your I.P. address to determine your general location (such as city, state, or zip code);
Sensory Information. Audio, electronic, visual, and similar information;
Employment Information. Professional or employment-related information;
Inferences. Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes;
Sensitive Personal Information
Government ID. Government identification such as social security numbers, driver’s license, state identification card, or passport number;
Account access information. Information such as account login, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;
Precise geolocation data. Data derived from a device and that is used or intended to be used to locate you within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet;
Sensitive demographic data. Racial or ethnic origin, religious or philosophical beliefs, or union clientship;
Biometric information. For the purpose of uniquely identifying an individual.
We may use (and may have used during the 12-month period prior to the effective date of this Statement) your personal information for the purposes described in our Sandalwood Solutions Privacy Notice and for the following business purposes specified in the CCPA:
Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services;
Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;
Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction;
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
Debugging to identify and repair errors that impair existing intended functionality;
Undertaking internal research for technological development and demonstration;
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us.
Sources of Personal Information
During the 12-month period prior to the effective date of this Statement, we may have obtained personal information about you from the following categories of sources:
Directly from you, such as when you sign up for an account, contact client services, or participate in sweepstakes, promotions, research, or survey activities;
Our Bank Partners;
Your devices, when you use our Site or App;
Your family or friends, such as when they provide us with your contact information by choosing to share their phone contacts with Sandalwood Solutions;
Payment processors;
Credit reporting agencies;
Our affiliates and subsidiaries;
Vendors who provide services on our behalf;
Our joint marketing partners;
Our business partners (such as referring websites);
Online advertising services and advertising networks;
Data analytics providers;
Government entities;
Operating systems and platforms;
Social networks;
Data brokers
California Privacy Rights
Below are rights that are specific to California Residents. California residents also have additional rights as described in the California and Virginia Rights section below.
Right to Opt-Out / “Do Not Sell or Share My Personal Information.” The CCPA requires us to describe the categories of personal information we sell or share with third parties and how to opt out of future sales. It is important to know that the definition of “sale” and “share” is very broad, and the common flow of information for advertising and analytics may be considered a sale or sharing. Sandalwood Solutions does not provide information that you might typically think of as personal information to third parties in exchange for money; however, under the CCPA, personal information includes unique identifiers, including things like I.P. addresses, cookie I.D.s, pixel tags, and mobile ad I.D.s. The law defines a “sale” broadly to include simply making such personal information available to third parties in some cases. “Share” is defined as providing personal information to a third party to target advertising to a consumer based on information about their activity on multiple websites across the internet. In the last 12 months, when you access our online services, we may let advertising and analytics providers collect I.P. addresses, cookie I.D.s, advertising I.D.s, and other unique identifiers, which may be collected along with device and usage data, and information about your interactions with our online services and advertisements. Learn more about this opt-out on our FAQ page here.
We do not knowingly sell or share the personal information of minors under 16 years of age.
Learn more about how to opt out in the “How to submit a request” section below.
For California and Virginia Consumers
If you are a California or Virginia resident, you have rights regarding your personal information, as described below (for California residents, these are in addition to the choices described in the California section above).
Access. You have a right to request that we disclose to you, twice in a 12-month period, the personal information we have collected about you. You also have a right to request additional information about our collection, use, disclosure, or sale of such personal information, which is also provided in this privacy statement.
Right to Request Correction or Deletion. You also have the right to request that we correct inaccurate personal information and that we delete personal information under certain circumstances, subject to a number of exceptions.
Right to opt-out of targeted advertising (Virginia residents). To opt out from or otherwise control targeted advertising, you have several options:
You can utilize any of the options in the “cookie and similar technologies” section under “Your Choices.”
You can use the controls available through our website to decline advertising-related cookies, which includes by clicking “do not sell or share my personal information”
You can use the Global Privacy Control setting in a web browser or browser extension as described below.
These choices are specific to the device or browser you are using. If you access our services from other devices or browsers, take these actions from those systems to ensure your choices apply to the data collected when you use those systems.
Shine the Light Request. You also may have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties.
How to Submit a Request. To submit an access, correction, or deletion request, please email info@sndlsolutions.com, submit a request through our webform, or call us at (855) 469-2017 To submit a Shine the Light request, email us at info@sndlsolutions.com. If you designate an authorized agent to make an access or deletion request on your behalf using one of the channels described above, we may require you to provide the authorized agent written permission to do so and to verify your own identity directly with us (as described below). For questions or concerns about our privacy policies and practices, please contact us as described in the How to Contact Us section of our Privacy Notice.
How to Submit a Sale or Share Opt-Out Request. If you’d like to tell us not to make your personal information available in ways that we’ve identified may be a sale or sharing under the CCPA, toggle off the setting your App settings. Alternatively, you can click on our “Do Not Sell or Share” link at the bottom of our homepage or use the Global Privacy Control signal described below, but these options will only be saved to your browser for the session which you are currently active in and will not change your account settings. Further, using these choices will not stop all interest-based advertising and will opt you out of sales and sharing only after the point in time at which you make your selection.
Global Privacy Control. You can also use the Global Privacy Control (GPC). Some browsers and browser extensions support the GPC or similar controls that can send a signal to the websites you visit, indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When we detect this signal, we will make reasonable efforts to respect your choices indicated by the GPC setting or similar control that is recognized by regulation or otherwise widely acknowledged as a valid opt-out preference signal.
Verifying Requests. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request (with the exception of a request to opt out of sales). We may require you to provide any of the following information: your name, date of birth, the last four digits of your Social Security number, the email and physical addresses associated with your Sandalwood Solutions account, one or more recent transactions, and the last four digits of one or more Sandalwood Solutions-branded cards associated with your account. If you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.
Retention of Personal Data. We retain personal data for as long as necessary to provide the services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.
Additional Information. If you choose to exercise any of your rights, you have the right to not receive discriminatory treatment by us. Except for the automated controls described above, if you send us a request to exercise your rights or these choices to the extent permitted by applicable law, we may charge a fee or decline requests in certain cases. For example, we may decline requests where granting the request would be prohibited by law, could adversely affect the privacy or rights of another person, would reveal a trade secret or other confidential information, or would interfere with a legal or business obligation that requires retention or use of the data. Further, we may decline a request where we are unable to authenticate you as the person to whom the data relates, the request is unreasonable or excessive, or where otherwise permitted by applicable law. If you receive a response from us informing you that we have declined your request, in whole or in part, you may appeal that decision by submitting your appeal to info@sndlsolutions.com. Please provide the state that you are writing from and include any documentation you may have regarding the matter that you are appealing.
Updates to Our Privacy Notice
We may update this Privacy Notice from time to time and without prior notice to you to reflect changes in our personal information practices. We will indicate at the top of the Notice when it was most recently updated.
How to Contact Us
You can update your preferences, ask us to remove your information from our mailing lists, submit a request, or ask us questions about this Privacy Notice by calling us at (855) 469-2017 or writing to us at info@sndlsolutions.com.