PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

Last Updated:  December 30, 2021

BIOGRAPH LLC

This Privacy Notice for California residents (“California Notice”) supplements the information contained in Biograph LLC’s (the “Company”, “Biograph”, “we”, “us” and “our”) Privacy Notice located at  https://www.biographbook.com/privacy-policy/ (“Privacy Notice”).  This California Notice applies solely to all visitors, users, clients, and others who reside in the State of California (“you”).  We are providing this California Notice pursuant to the CCPA and as amended by the CPRA.  Any terms defined in the CCPA or CPRA have the same meaning when used in this California Notice.

PERSONAL INFORMATION WE COLLECT AND HOW WE COLLECT IT

We collect the type of information described herein and in the Privacy Notice, which includes Personal Information, in the manner described herein and in the Privacy Notice.  “Personal Information” means information that identifies, relates to, or could reasonably be linked directly or indirectly with a particular California resident, including without limitation information that identifies or could reasonably be linked, directly or indirectly, with a particular consumer or device.

Personal Information does not include (i) publicly available information from government records; (ii) deidentified or aggregated consumer information; or (iii) information excluded from CCPA’s scope such as health and medical information.  If you do not provide the information that we ask for, we may not be able to provide you with the requested services.

Personal Information may be collected from you (directly or indirectly) or you may provide such Personal Information when you contact us, visit our website, and/or engage us to provide services.  This California Notice and the Privacy Notice explain our practices for collecting, using, sharing, maintaining, protecting, and disclosing such information.

We have collected the following categories of Personal Information within the last twelve (12) months:

USE OF PERSONAL INFORMATION

For more information about how the Personal Information (as defined in the Privacy Notice) we collect and how we collect it, please see the “Information We Collect” and “How We Use and Share Information” sections of our Privacy Notice.

SHARING PERSONAL INFORMATION

We share Personal Information as further described in the “How We Use and Share Information” section of the Privacy Notice.  We also disclose the categories of third parties to whom we disclosed Personal Information for business purposes is described in the “Whom We Share Your Information With” of the Privacy Notice.

RIGHTS OF CALIFORNIA RESIDENTS

The CCPA provides California residents with specific rights regarding their Personal Information.  You have the following rights that may be exercised as further described below:

ACCESS AND DATA PORTABILITY RIGHTS

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past twelve (12) months.

You may make such request for access or data portability twice within twelve (12) month period.  Once we receive and confirm your verifiable consumer request, we will disclose the following to you:

(i) the categories of Personal Information we collected about you;

(ii) the categories of sources for the Personal Information we collected about you;

(iii) the business purpose for collecting (or selling, if applicable) the Personal Information;

(iv) the categories of third parties with whom we share such Personal Information; and

(v) the specific information we collected about you.

REQUEST FOR INFORMATION

Pursuant to Section 1798.83 of the California Civil Code (California’s “Shine the Light” law), residents of California have the right to request from a business, with whom the California resident has an established business relationship, certain information with respect to the types of personal information the business shares with third parties for such third parties’ direct marketing purposes and the identities of the third parties with whom the business has shared such information during the immediately preceding twelve (12) month period.

DELETION REQUESTS

Pursuant to the CCPA, you have the right to request that we delete any of your Personal Information we collected from you and retained, subject to certain exceptions.  Once we receive and confirm your verifiable consumer request, we will delete and will direct our service providers to delete your Personal Information from our records, unless an exception applies.  Keep in mind, we may deny your request if it is necessary for us or our service providers to:

(i) complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform services pursuant to our contract with you;

(ii) detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;

(iii) debug our website and/or identify and repair errors that impair existing intended functionality;

(iv) exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;

(v) comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.);

(vi) engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;

(vii) enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;

(viii) make other internal and lawful uses of that information that are compatible with the context in which you provided it; and

(ix) or Biograph to comply with a legal obligation.

OPT-OUT AND OPT-IN RIGHTS FOR SALE OF PERSONAL INFORMATION

In the past twelve (12) months we have not sold Personal Information to a third party for monetary or other valuable consideration.  If you are sixteen (16) years of age or older, you have the right to direct us not to sell your Personal Information at any time by contacting us at info@biographbook.com  by sending a request in writing to:

Biograph LLC

Attn: Middleton Partners

400 Skokie Blvd #820

Northbrook, IL 60062

In the event you make the foregoing request, we will wait at least twelve (12) months thereafter to request that you opt-in to the sale of Personal Information (should we change our practices in the future and desire to do so).  Please note, you do not need to create an account with us or engage us to provide services to exercise your opt-out rights.  We will only use the Personal Information and other data in the opt-out request to review and comply with the request.

VERIFICATION ON CONSUMER REQUEST AND TIMELINE

It is important for us to make sure that you are authorized to make the consumer request.  Because of this, we’ll need to verify your identity and will ask that you provide us information to verify your identity.

If you make a request on behalf of another individual, we will need to verify that you have the authority to do so.  You must also describe your request with sufficient detail that allows us to properly understand, evaluate and respond to such request.  We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. We will not honor your request if an exception to the law applies.

We will try and respond to requests within forty-five (45) days after our receipt of such verifiable request (or within such other time as required by applicable law).  If we need additional time, we will notify you in writing and inform you of the reason for the extension of time.  For the avoidance of doubt, any such requests for Personal Information will cover the twelve (12) month period immediately preceding the date of such verifiable request.  We will provide such information in a commonly used format.  We will not discriminate against you for exercising your rights under the CCPA.  For more information about requests, please see the “Your Rights and Your Information” section of the Privacy Policy.  Send us an email at info@biographbook.com  or send a request (listed below) in writing to:

Biograph LLC

Attn: Middleton Partners

400 Skokie Blvd #820

Northbrook, IL 60062

DO NOT SELL MY PERSONAL INFORMATION

The California Consumer Privacy Act (“CCPA”) provides California residents the right to prohibit businesses from selling their personal information.  Selling under the CCPA is defined as “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration.” Our organization does not sell your personal information and only uses it for purposes allowed for under the CCPA.  We use your personal information to carry out a business purpose defined under our Privacy Notice or to interact with a third party to tell them about your request to not sell your personal information.

You can still make a request for us to not sell your personal information by contacting us at info@biographbook.com .