CA Notice of Consent

---

Privacy Information for California Residents

If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and share your “personal information” (all terms as defined in the California Consumer Privacy Act ("CCPA")).

Categories of personal information we collect

Throughout this Policy, we discuss in detail the specific pieces of personal information we collect from and about users. Under the CCPA, we are also required to provide you with the “categories” of personal information we collect. The categories, and some examples of what we may collect, are:

• Identifiers and contact or registration information, e.g., your name, date of birth, email address, postal address, telephone number, country of residence, wireless device identifier, account username and password, and government-issued ID (US state-issued or the country-issued ID, passport number, etc.)
• Demographic and statistical information, e.g., gender identity, race, ethnicity, marital status, education, professional or employment-related information, interests, lifestyle information, and hobbies
• Commercial and financial information, e.g., business name; tax identification numbers; transaction history, expiration date, and last four digits of credit/debit card number; and transaction history, country of, and last four digits of bank account
• User-generated content, e.g., photos, videos, audio, any information you submit in public forums or message boards, and feedback or testimonials you provide about our Services
• Customer service information, e.g., questions and other messages you address to us directly through online forms, by email, over the phone, or by post; and summaries of your interactions with the Pitchforkd Support Team
• Device information and device identifiers, e.g., IP address; browser type and language; operating system; platform type; device type; software and hardware attributes; and unique device, advertising, and app identifiers
• Connection and usage data, e.g., information about files you download, domain names, landing pages, browsing activity, content or ads viewed and clicked, dates and times of access, pages viewed, forms you complete or partially complete, search terms, uploads or downloads, whether you open an email and your interaction with email content, access times, error logs, and other similar information
• Geolocation, e.g., city, state and ZIP code associated with your IP address or derived through Wi-Fi triangulation; and, with your permission in accordance with your mobile device settings, based on your mailing address
• Other Information, e.g., any other information you choose to directly provide to us in connection with your use of the Services

How we use your personal information

We use and share the categories of personal information we collect about you consistent with the various business purposes we discuss throughout this Policy, as described in the “How We Use This Information” and “How We Share This Information” sections above.

Please note that the CCPA sets forth certain obligations for businesses that “sell” personal information to third parties. We do not engage in such activity and have not engaged in such activity in the past twelve months from the effective date of this Policy.

CCPA rights disclosure

If you are a California resident, the CCPA allows you or an authorized agent on your behalf to make certain requests about your personal information. Specifically, the CCPA allows you or your agent to request:

• Information about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we share/disclose personal information. Such information is also set forth in this Policy.
• Provide access to and/or a copy of certain information we hold about you.
• Delete certain information we have about you.
• Provide you with information about the financial incentives that we offer to you, if any.

Please note that certain information may be exempt from such requests under California law. For example, we need certain information in order to provide the Services to you. We also will take reasonable steps to verify your identity before responding to a request. You are also permitted to designate an authorized agent to subject certain requests of your behalf. To verify that your agent has been authorized to make a request on your behalf, we may require them to provide us with a signed written authorization or a copy of a power of attorney.

The CCPA further provides you with the right to not be discriminated against (as provided for in applicable law) for exercising your rights.

If you would like further information regarding your legal rights under California law or would like to exercise any of them, please contact us at support@pitchforkd.com

Shine the Light

The California “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your personal information with third parties for their own direct marketing purposes.

Email and Mobile Notifications

We want to communicate with you only if you want to hear from us. We try to keep emails to a minimum and give you the ability to opt in to any marketing communications we send.

We will send you email relating to your transactions on Pitchforkd. You may also elect to receive certain marketing email communications, in accordance with your preferences, and from which you may opt out at any time by adjusting your notification settings. If you download the Pitchforkd app, you can manage the notifications you receive on your mobile device in your profile settings.

We’ll also send you service-related announcements when it’s necessary to do so.

Security

We take security seriously, and the security of your personal data is important to us. We follow industry-standard practices to protect the data we collect and maintain, including using Transport Layer Security (TLS) to encrypt information as it travels over the internet. No method of transmission over the internet or electronic storage is completely secure, so Pitchforkd cannot guarantee its absolute security. Your account information is protected by a password, which you should choose carefully and keep secure. We encourage all users to enable two-factor authentication in account settings to further protect their account.

We have a Security Incident Response Team (SIRT) and protocol in place in the event of a data breach. We encourage the responsible disclosure of vulnerabilities of our Services by emailing support@pitchforkd.com, and we will invite valid disclosures to our bug bounty program.

Data Protection Officer

To contact our Data Protection Officer, please email support@pitchforkd.com.

Data Protection Authority

Subject to applicable law, if you are a citizen or resident of the European Economic Area, you also have the right to (i) object to Pitchforkd’s use of your personal information and (ii) lodge a complaint with your local data protection authority or the United Kingdom Information Commissioner’s Office, which is Pitchforkd’s lead supervisory authority in the European Union.

United Kingdom Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire

SK9 5AF, United Kingdom

Telephone: +0303 123 1113

Fax: 01625 524510

Web: https://ico.org.uk/global/contact-us/

Children

People under 18 (or the legal age in your jurisdiction) are not permitted to use Pitchforkd on their own. Pitchforkd does not knowingly collect any personal information from children under the age of 16 and children under 16 are not permitted to register for an account or use our Services.

If you believe that a child has provided us with personal information, please contact us at support@pitchforkd.com. If we become aware that a child under age 16 has provided us with personally identifiable information, we’ll delete it.