CCPA / CPRA Privacy Notice
This notice describes how DefendMyRep ("we", "us") collects, uses, and discloses personal information of California residents, as required by the California Consumer Privacy Act of 2018 ("CCPA") and the California Privacy Rights Act of 2020 ("CPRA").
1. Categories of personal information collected
Over the last 12 months, we have collected the following CCPA categories of personal information:
- Identifiers — name, email, phone, postal address (when voluntarily submitted)
- Internet activity — page views, referrer, IP address (anonymized after 30 days), browser type
- Professional information — role, company, industry (when voluntarily submitted)
- Inferences — risk-segment posterior derived from the quiz (computed in your browser, not transmitted to us unless you choose to share it)
We do not collect: biometric information, precise geolocation, racial / ethnic origin, religious beliefs, mental / physical health, sex life, sexual orientation, immigration status, union membership, genetic data, or contents of mail/email/text not directed to us.
2. Sources of personal information
- Directly from you (forms, emails, scheduled calls)
- From service providers (calendar / email / analytics)
3. Purposes for collection
- Provide and improve our reputation defense services
- Communicate with you about your inquiry or engagement
- Comply with legal obligations
- Detect and prevent security incidents
4. Sale or sharing of personal information
We do not sell or share personal information. We have not sold or shared personal information for monetary or other valuable consideration in the preceding 12 months.
"Sharing" under CPRA includes disclosing personal information to a third party for cross-context behavioral advertising. We do not engage in cross-context behavioral advertising.
5. Your CCPA / CPRA rights
- Right to know what personal information we have collected, used, disclosed, and sold/shared.
- Right to delete personal information we have collected from you (subject to limited exceptions).
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information (we do neither; this is preserved as a matter of right).
- Right to limit use of sensitive personal information (we do not process sensitive PI beyond what is necessary).
- Right to non-discrimination for exercising any of the above.
6. How to exercise rights
Send a request to intel@defendmyrep.com with subject line "CCPA Request" along with your name, the right you wish to exercise, and verification details (you may be asked for two pieces of personal information matching what we have on file). We respond within 45 days, with a single 45-day extension if needed.
7. Authorized agents
You may designate an authorized agent to make a request on your behalf. We will require a signed written authorization or power of attorney.
8. Retention
We retain personal information only as long as necessary for the purposes for which it was collected, or as required by law. Quiz answers and posterior scores are not retained (they compute in your browser). Engagement records are retained for the duration of the engagement plus seven years.
9. Contact
Privacy questions: intel@defendmyrep.com · "CCPA Request" in subject line.