Privacy Policy
Last Updated: Jul 6, 2026
Privacy Policy
Thank you for choosing to be part of our community at Career Karma Platform, LLC ("Company", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy or practices regarding your personal information, please contact us at privacy@careerkarma.com.
When you visit our website, mobile application, and use our services, you trust us with your personal information. We take your privacy very seriously. In this privacy policy, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this that you do not agree with, please discontinue the use of our Sites or Apps and our services.
This privacy policy applies to all information collected through our website (“Sites”), mobile application("Apps"), and/or any related services, sales, marketing or events (we refer to them collectively in this privacy policy as the "Services").
Please read this privacy policy carefully as it will help you make informed decisions about sharing your personal information with us.
TABLE OF CONTENTS
- WHAT INFORMATION DO WE COLLECT?
- HOW DO WE USE YOUR INFORMATION?
- ARTIFICIAL INTELLIGENCE AND CAREER ADVISOR SERVICES
- WILL YOUR INFORMATION BE SHARED WITH ANYONE?
- WHO WILL YOUR INFORMATION BE SHARED WITH?
- DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
- DO WE USE GOOGLE MAPS?
- HOW DO WE HANDLE YOUR SOCIAL LOGINS?
- WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
- HOW LONG DO WE KEEP YOUR INFORMATION?
- HOW DO WE KEEP YOUR INFORMATION SAFE?
- DO WE COLLECT INFORMATION FROM MINORS?
- WHAT ARE YOUR PRIVACY RIGHTS?
- CONTROLS FOR DO-NOT-TRACK FEATURES
- DO CALIFORNIA, VIRGINIA, COLORADO, CONNECTICUT RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
- CHILDREN’S ONLINE PRIVACY PROTECTION ACT (COPPA)
- DO WE MAKE UPDATES TO THIS POLICY?
- HOW CAN YOU CONTACT US ABOUT THIS POLICY?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when registering at the Services or Apps, expressing an interest in obtaining information about us or our products and services, when participating in activities on the Services, Sites, or Apps(such as posting messages in our online forums or entering competitions, contests, or giveaways) or otherwise contacting us.
The personal information we collect depends on the context of your interactions with us and the Services, Sites, or Apps, as well as the choices you make and the products and features you use. The personal information we collect can include the following:
We may conduct surveys and contests occasionally that may request personal information, including age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, driver’s license, passport number, and veteran or military status.
Personal Information. We collect the following categories of personal information:
- Identifiers: first name, maiden name, last name, and nickname; phone numbers; email addresses; audio and visual information if you choose to share photos or videos; geography, race, and national origin if you apply to or participate in programs or surveys that request that information; and if you applied to receive a laptop through Reskill America then we could have collected your data such as driver’s license number, passport number or government identifier; and other similar data.
- Commercial information: services viewed or purchased.
- Internet or network activity: browsing behavior, device data, interactions.
- Geolocation data: approximate location derived from IP address.
- Inferences: preferences, interests, or behavior profiles.
- Sensitive personal information: if applicable, precise geolocation or account credentials.
Social Media Login Data. We may provide you with the option to register using your social media account details, such as Facebook or Twitter. If you choose to register in this way, we will collect the information described in the section called "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.
Information automatically collected
In Short: Some information — such as IP address and/or browser and device characteristics — is collected automatically when you visit our Services, Sites or Apps. Some information is automatically collected through cookies and tracking technologies. We also collect information from third parties (e.g., partners, analytics providers, and educational institutions).
We automatically collect certain information when you visit, use or navigate the Services, Sites, or Apps. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, Sites, or Apps, and other technical information. This information is primarily needed to maintain the security and operation of our Services, Sites, or Apps, and for our internal analytics and reporting purposes.
Online Identifiers. We collect devices; applications; cookie identifiers and other identifiers used for analytics and marketing; tools and protocols, such as IP addresses; and other similar data.
Information collected through our Sites or Apps
In Short: We may collect information about your geolocation, mobile device, push notifications, and your use of our apps.
If you use our Apps, we may also collect the following information:
- Geo-Location Information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application, to provide location-based services. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Access. We may request access to or permission for certain features on your mobile device, including Bluetooth, camera, contacts, microphone, reminders, SMS messages, social media accounts, storage, calendar, sensors, and other features. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Data. We may automatically collect device information (such as your mobile device ID, model and manufacturer), operating system, version information, and IP address.
- Push Notifications. We may request to send you push notifications regarding your account or the mobile application. If you wish to opt out of receiving these types of communications, you may turn them off in your device's settings.
- Third-Party Software/Service Providers: We may use Hotjar, Smartlook, and Microsoft Clarity, which are analytics solutions. These tools may record: Screens visited, Interaction patterns (such as screen actions and gestures, e.g., taps and scrolls), and Device details (Type, Version, Model, Operating System). We are using the information collected by these tools to improve our Sites or Apps. Smartlook does not collect personally identifiable information or track your browsing habits across sites or apps. For more information, see Privacy Policy for Information Collected by Smartlook. See also the Privacy Policy for Hotjar and the Microsoft Privacy Policy.
The information is primarily needed to maintain the security and operation of our Sites and Apps, for troubleshooting and for our internal analytics and reporting purposes.
AI Interaction Data. We collect information submitted through AI-powered features, including chat prompts, responses, uploaded content, user feedback, and interaction metadata. This information may be used to provide AI-generated services, maintain security, detect misuse, improve user experience, and comply with legal obligations.
2. HOW DO WE USE YOUR INFORMATION?
In Short: We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent. We use personal information only for purposes that are reasonably necessary and proportionate to:
- Provide and improve our services
- Match users with educational programs or partners
- Maintain platform security and integrity
- To provide AI-powered career guidance, educational matching, support services, personalization, fraud detection, and platform safety functions.
We do not use sensitive personal information for purposes beyond those permitted by law without providing you the right to limit such use.
We use personal information collected via our Services, Sites or Apps for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below.
We use the information we collect or receive:
- To facilitate account creation and the login process. If you choose to link your account with us to a third-party account (such as your Google or Facebook account), we use the information you allow us to collect from those third parties to facilitate account creation and the login process for the performance of the contract. See the section below headed "HOW DO WE HANDLE YOUR SOCIAL LOGINS" for further information.
- To post testimonials. We post testimonials on our Services that may contain personal information. Prior to posting a testimonial, we will obtain your consent to use your name and the consent for the testimonial. If you wish to update or delete your testimonial, please contact us at privacy@careerkarma.com and be sure to include your name, testimonial location, and contact information.
- Request feedback. We may use your information to request feedback and to contact you about your use of our Services.
- To enable user-to-user communications. We may use your information in order to enable user-to-user communications with each user's consent.
- To manage user accounts. We may use your information to manage our account and keep it in working order.
- To send administrative information to you. We may use your personal information to send you product, service, and new feature information and/or information about changes to our terms, conditions, and policies.
- To protect our Services. We may use your information as part of our efforts to keep our Services safe and secure (for example, for fraud monitoring and prevention).
- To enforce our terms, conditions and policies for business purposes, to comply with legal and regulatory requirements or in connection with our contract.
- To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.
- Fulfill and manage your orders. We may use your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.
- Administer prize draws and competitions. We may use your information to administer prize draws and competitions when you elect to participate in our competitions.
- To deliver and facilitate delivery of services to the user. We may use your information to provide you with the requested service.
- To respond to user inquiries/offer support to users. We may use your information to respond to your inquiries and resolve any issues you may have with our Services.
- To send you marketing and promotional communications. We and/or our third-party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt-out of our marketing emails at any time (see the "WHAT ARE YOUR PRIVACY RIGHTS" below).
- Deliver targeted advertising to you. We may use your information to develop and display personalized content and advertising (and work with third parties who do so) tailored to your interests and/or location and to measure its effectiveness. For more information, see our Cookie Notice: https://careerkarma.com/cookie-policy.
- For other Business Purposes. We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and evaluating and improving our Services, Sites, Apps, products, marketing, and your experience. We may use and store this information in aggregated and anonymized form so that it is not associated with individual end users and does not include personal information. We will not use identifiable personal information without your consent.
At or before the point of collection, we provide notice describing:
- Categories of personal information collected
- Purposes for which the information is used
- Whether such information is sold or shared
3. ARTIFICIAL INTELLIGENCE AND CAREER ADVISOR SERVICES
Use of Artificial Intelligence
Certain features of our Services utilize artificial intelligence ("AI"), machine learning models, and automated processing technologies to provide career guidance, educational program recommendations, informational content, and user support.
Our AI-powered Career Advisor may analyze information you provide, including your educational background, career interests, geographic region, employment goals, skills, preferences, and other information submitted through the Services, to generate personalized recommendations and responses.
Information Processed by AI Systems
When you use AI-powered features, information that you submit may be processed by our third-party AI service providers and us to:
- Generate career and educational recommendations;
- Match users with educational institutions, programs, or partners;
- Answer questions regarding careers, education, training, and professional development;
- Improve system performance, security, reliability, and user experience;
- Detect abuse, fraud, or misuse of the Services.
Information processed by AI systems may include information contained in chat conversations, prompts, uploaded documents, survey responses, account information, and other content voluntarily submitted by you.
No Professional, Educational, Financial, Legal, or Employment Advice
The AI-powered Career Advisor is provided solely for informational and educational purposes.
AI-generated content does not constitute:
- Professional career counseling;
- Academic advising;
- Legal advice;
- Financial advice;
- Employment guarantees;
- Admissions guarantees;
- Licensing or certification advice;
- Any other professional advice.
Users should independently verify all information before relying upon it for educational, employment, financial, legal, or other important decisions.
Third-Party AI Providers
We may use third-party artificial intelligence providers, including those identified in this Privacy Policy, to process user input and generate responses.
Such providers process information pursuant to contractual obligations designed to protect personal information and comply with applicable privacy laws.
We prohibit third-party AI providers from using personal information submitted through our Services for unrelated purposes except as permitted by applicable law and contractual agreements.
AI Training and Model Improvement
Unless otherwise disclosed at the time of collection, personal information submitted through AI interactions is not used by Career Karma to train publicly available AI foundation models.
We may use de-identified, aggregated, anonymized, or statistical information derived from user interactions to improve our products, services, security controls, and AI systems.
User Responsibilities
Users agree not to submit through AI-powered services:
- Sensitive personal information not reasonably necessary for the requested service;
- Medical information;
- Financial account information;
- Government-issued identification numbers;
- Protected health information;
- Information regarding minors unless authorized by law;
- Any content prohibited by our Terms of Service.
4. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
In Short: We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.
In the preceding 12 months, we have disclosed the following categories of personal information for business purposes:
- Identifiers
- Commercial information
- Internet or network activity
- Geolocation data
- Inferences
- Sensitive personal information
We do not sell personal information.
We may process or share data based on the following legal basis:
- Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.
- Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
- Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfill its terms.
- Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
- Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
More specifically, we may need to process your data or share your personal information in the following situations:
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Vendors, Consultants and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf, or who examine data for their own purposes, and require access to such information to do that work. Examples include: payment processing, data analysis, email delivery, hosting services, customer service, and marketing efforts. We may allow selected third parties to use tracking technology on the Services, Sites, or Apps, which will enable them to collect data about how you interact with the Services, Sites, or Apps over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, and better understand online activity. Unless described in this Policy, we do not share, sell, rent, or trade any of your information with third parties for their promotional purposes.
- Third-Party Advertisers. We may use third-party advertising companies to show ads when you visit the Services, Sites, or Apps. These companies may use information about your visits to our Website(s) and other websites that are contained in web cookies and other tracking technologies in order to provide advertisements about goods and services of interest to you. See our Cookie Policy: https://careerkarma.com/cookie-policy for further information.
- Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy policy. Affiliates include our parent company and any subsidiaries, joint venture partners or other companies that we control or that are under common control with us
- Business Partners. We may share your information with our business partners to offer you certain products, services or promotions.
- Other Users. When you share personal information (for example, by posting comments, contributions or other content to the Services, Sites, or Apps) or otherwise interact with public areas of the Services or Apps, such personal information may be viewed by all users and may be publicly distributed outside the Services or Apps in perpetuity. If you interact with other users of our Services, Sites, or Apps and register through a social network (such as Facebook), your contacts on the social network will see your name, profile photo, and descriptions of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, Sites, or Apps, and view your profile.
5. WHO WILL YOUR INFORMATION BE SHARED WITH?
In Short: We only share information with the following third parties.
We only share and disclose your information with the following third-party business partners. We have categorized each party so that you may easily understand the purpose of our data collection and processing practices. We ask for your consent to share your information with a third-party business partner to process and perform the services you requested. If we have processed your data based on your consent and you wish to revoke your consent, please contact us using the contact details provided in the section below titled "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"
- Affiliate Marketing Programs
2U, 4Geeks Academy, App Academy, Bloc, BloomTech, Bottega Tech, BrainStation, Caltech, CareerFoundry, Careerist, Code Fellows, Coding Dojo, Coding Temple, devCodeCamp, Devmountain, Digital Marketing Institute, DigitalCrafts, Emeritus, Flatiron School, Flockjay, Fullstack Academy, Galvanize/ Hack Reactor, General Assembly, Hacker USA, Highway Education, Ironhack, Jigsaw Labs, Kenzie Academy, MentorWorks, Metis, NGT Academy, Nucamp, Practicum by Yandex, Prehired, Rithm, Sabio, Simplilearn, SkillBank, Springboard, Southern New Hampshire University, SV Academy, Tech Elevator, Tech I.S., TechPro Education, The Tech Academy, Thinkful, Victory Lap. - Allow Users to Connect to their Third-Party Accounts
Facebook account, Google Account - Artificial Intelligence
Artificial Intelligence Providers: Anthropic, OpenAI, AssemblyAI, ElevenLabs, and other AI service providers used to provide conversational assistance, transcription, recommendation systems, content generation, speech synthesis, safety monitoring, abuse detection, and related AI-powered functionality. - Content Optimization
Youtube video embed - Functionality and Infrastructure Optimization
Cloud Firestore, Firebase Legacy - Retargeting Platforms
Facebook Custom Audience - Scholarship Applications
Google - Data Analysis
Google, Looker - Social Media Sharing and Advertising
Facebook advertising - User Account Registration and Authentication
Facebook Login, Google Login - Web and Mobile Analytics
Amplitude, Hotjar, Smartlook, Microsoft Clarity - Website Hosting
Amazon, GCP - Website Performance Monitoring
Sentry, DataDog - Website Testing
TestFlight
6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information and track your activities across websites and services. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice: https://careerkarma.com/cookie-policy. You may opt out of such sharing by clicking the ‘Do Not Sell or Share My Personal Information’ link.
7. DO WE USE GOOGLE MAPS?
In Short: Yes, we use Google Maps to provide better service.
The Sites and Apps use the Google Maps Platform, which is subject to Google's Terms of Service. You may find the Google Maps Platform Terms of Service here. To find out more about Google’s Privacy Policy, please refer to this link. We obtain and store your location on your device ('cache'). You may revoke your consent at any time by contacting us using the contact details provided at the end of this document.
8. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
In Short: If you choose to register or log in to our services using a social media account, we may have access to certain information about you.
Our Services allow you to register and log in using your third-party social media account details (such as your Facebook or Twitter login). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends list, profile picture as well as other information you choose to make public on such social media platforms.
We will use the information we receive only for the purposes that are described in this privacy policy or that are otherwise made clear to you on the Services, Sites, or Apps. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy policy to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.
9. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
In Short: We are not responsible for the safety of any information you share with third-party providers who advertise on our Website but are not affiliated with it.
The Services may contain advertisements from third parties that are not affiliated with us and which may link to other websites, online services or mobile applications. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy notice. We are not responsible for the content, privacy, or security practices and policies of any third parties, including other websites, services, or applications that may be linked to or from the Services. You should review the policies of such third parties and contact them directly to respond to your questions.
10. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law.
We will only keep your personal information for as long as necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
11. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Services or Apps is at your own risk. You should only access the services within a secure environment.
12. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 16 years of age.
The Services are intended for individuals aged 18 or older. By using the Services, Sites, or Apps, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services, Sites, or Apps. If we learn that personal information from users under 16 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we have collected from children under age 16, please contact us at privacy@careerkarma.com.
13. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: You may review, change, or terminate your account at any time.
If you are a resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
If you are a resident in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.
If you have questions or comments about your privacy rights, you may email us at at privacy@careerkarma.com.
Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:
- Log in to your account settings and update your account.
- Contact us using the contact information provided.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot issues, assist with investigations, enforce our Terms of Use, and/or comply with legal requirements.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually set your browser to remove and reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services, Sites, or Apps. To opt out of interest-based advertising by advertisers on our Services, Sites, or Apps, visit http://www.aboutads.info/choices/. For further information, please see our Cookie Notice: https://careerkarma.com/cookie-policy.
Opting out of email marketing: You can unsubscribe from our marketing email list at any time by clicking the unsubscribe link in the emails we send or by contacting us using the details below. You will then be removed from the marketing email list; however, we will still need to send you service-related emails necessary for the administration and use of your account. To otherwise opt-out, you may:
- Access your account settings and update preferences.
- Contact us using the contact information provided.
14. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.
15. DO CALIFORNIA, VIRGINIA, COLORADO, CONNECTICUT RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: Yes, if you are a resident of California, Virginia, Colorado or Connecticut, you are granted specific rights regarding access to your personal information.
If you are a California resident, you have the following rights:
- Right to know what personal information we collect and how we use it
- Right to access specific pieces of personal information
- Right to delete personal information
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information
- Right to limit the use of sensitive personal information
- Right to non-discrimination for exercising your rights
We may collect sensitive information as defined under the California Privacy Rights Act (CPRA). We use this information only for:
- Providing requested services
- Preventing fraud and ensuring security
- Complying with legal obligations
You have the right to limit the use of your personal information. You may exercise these rights by:
- Clicking Do Not Sell or Share My Personal Information
- Clicking Limit the Use of My Sensitive Information
- Contacting us at privacy@careerkarma.com
16. CHILDREN’S ONLINE PRIVACY PROTECTION ACT (COPPA)
In Short: We comply with COPPA standards for children’s privacy.
Our Services are intended for individuals age 18 or older. We do not knowingly collect personal information from minors under 18 without verifiable parental consent.
If we learn that we have collected personal information from a minor under 18 without parental consent, we will:
- Delete the information promptly; or
- Obtain verifiable parental consent prior to further use
Parents or guardians may:
- Review their child’s personal information
- Request deletion
- Refuse further collection or use
To exercise these rights, contact us at: privacy@careerkarma.com
17. DO WE MAKE UPDATES TO THIS POLICY?
In Short: We make updates to this privacy policy periodically and without notice to you.
18. HOW CAN YOU CONTACT US ABOUT THIS POLICY?
Please contact us at privacy@careerkarma.com
Information you provide to us
We collect the personal information you provide to us when you purchase our products or visit our website. The categories of information we may collect include:
Users
- Personal Identifiers, including name, email address, telephone number, and online Identifiers
- Location Information, including general location data
- Physical and Audio Data, including audio recordings, photos, and video recordings
- Inferences from Other Data, including inferences created from other personal information collected
Website Visitors
- Personal Identifiers, including online Identifiers
- Internet Activity
- Location Information, including general location data
Information from other sources
We may collect personal information about you from third-party sources, including Ad Networks.
The categories of information we may collect include:
Ad Networks
- Personal Identifiers, including Name, Email address, and Online Identifiers
How long we keep your data
We do not retain data for any longer than is necessary for the purposes described in this Policy.
We generally retain data according to the guidelines below.| Type of Data | Retention Period |
|---|---|
| Cookies and online data we collect while you use our website, including Online Identifiers, Internet Activity | We delete or anonymize data concerning your use of our website within 36 months of collecting it. |
| Data we collect when you sign up for promotional and marketing communications, including Email address, Telephone number | When you have signed up to receive promotional and marketing communications from us, we will retain any data collected for 3 years or until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will also retain a record of any opt-outs to prevent sending you future communications. |
| Data we collect when you review our products, answer surveys, or send feedback, including Online Identifiers | We retain review, survey, and feedback data for up to 36 months following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services. |
| Data we collect in connection with privacy requests, including Name, Email address | We retain records related to privacy requests for at least 24 months after the request is completed. |
| Data we collect for security purposes, including Email address | We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures. |
Why we process your information
We process personal information for the following business and commercial purposes:
- Analyzing Data
- Improving our Products & Services
- Operating Our Website or Mobile Apps
- Sending Promotional Communications
- Storing and Managing Data
How we disclose your information
We may disclose personal information about you for business and commercial purposes when you purchase our products or visit our website:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Business Operations Tool, Collaboration & Productivity Tools, Data Analytics Providers, Engineering Contractors, IT Infrastructure Services, Sales & Marketing Tools, and Website Operations Tools | Ad Networks, Business Partners, and Sales & Marketing Tools |
| Location Information | Data Analytics Providers | Business Partners |
| Physical and Audio Data | Engineering Contractors | None |
| Inferences from Other Data | Data Analytics Providers and Engineering Contractors | Business Partners |
| Internet Activity | Data Analytics Providers and Sales & Marketing Tools | Ad Networks |
EEA/UK (GDPR)
This section provides additional information for people in the European Economic Area (EEA) or United Kingdom (UK). The terms used in this section have the same meaning as in the General Data Protection Regulation and the UK Data Protection Act (GDPR). The term “personal information” as used in this notice has the same meaning as “personal data” in the GDPR.
Collection and Disclosure of Personal Data
The personal data we collect and how we share it is described above in our Privacy Policy.
Lawful Bases and Legitimate Interests
We process personal data on the following lawful bases:
- Complying with legal obligations
- Fulfilling contracts
- Consent
- Legitimate interests
Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Analyzing Data, Improving our Products & Services, Operating Our Website or Mobile Apps, Sending Promotional Communications, and Storing and Managing Data.
International Data Transfers
We may send the personal data of individuals in the EEA/UK/CH to third countries, including the United States, where it may be stored or processed, for example on our service providers’ cloud servers. When we transfer personal data, we rely either on Adequacy Decisions as adopted by the European Commission (EC), the UK Information Commissioner's Office (ICO), or the Swiss Federal Data Protection and Information Commissioner (FDPIC) on the basis of the EU-US Data Privacy Framework, UK-US Data Bridge, and Swiss-U.S. Data Privacy Framework agreements, Standard Contractual Clauses (SCCs) issued by the EC or the FDPIC, or International Data Transfer Agreements (IDTAs) approved by the ICO. Data protection authorities have determined that the SCCs and IDTAs provide sufficient safeguards to protect personal data transferred outside the EEA/UK/CH. You may read more about international data transfer mechanisms at the following links:
- https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
- https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-data-transfer-agreement-and-guidance/
- https://www.edoeb.admin.ch/edoeb/en/home/datenschutz/arbeit_wirtschaft/datenuebermittlung_ausland.html
Privacy Rights
Individuals in the EEA/UK/CH have the following rights regarding their personal data. Make a Privacy Request by clicking here. Once you submit a request, we will verify your identity and, in most cases, process it within 30 days.
Right to access. You have the right to request a copy of the personal data we hold about you.
Right of portability. You have the right to ask us to transfer your data to another party.
Right to rectification. You have the right to request that we rectify any incorrect information we have about you.
Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.
Right to withdraw consent. You have the right to withdraw your consent at any time when we rely on your permission to process your personal data.
Right to object. You have the right to object to our use of data about you.
Right to restrict processing. In certain circumstances, you have the right to restrict our processing of your personal data to storage only, subject to some exceptions. This right applies when:
- You have contested the accuracy of your personal data and we are still verifying its accuracy.
- Your personal data has been unlawfully processed under the GDPR.
- You need us to retain your data to establish, exercise, or defend a legal claim.
- You have previously objected to our processing of your personal data and the status of that review is still pending.
Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit the Information Commissioner’s Office website at https://ico.org.uk/, the Federal Data Protection and Information Commissioner’s website at https://www.edoeb.admin.ch/, or see a list of EU Data Protection Authorities at https://www.gdprregister.eu/gdpr/dpa-gdpr/.
Inquiries
Controller contact information
Career Karma
US State Privacy Notices
California (CCPA)
This section provides additional information for California residents under the California Consumer Privacy Act (CCPA). The terms used in this section have the same meaning as in the CCPA. This section does not apply to information that is not considered "personal information," such as anonymous, deidentified, or aggregated information, nor does it apply to publicly available information as defined in the CCPA.
Information we collect from you
Users
- Personal Identifiers, including name, email address, telephone number, and online Identifiers
- Location Information, including general location data
- Physical and Audio Data, including audio recordings, photos, and video recordings
- Inferences from Other Data, including inferences created from other personal information collected
Website Visitors
- Personal Identifiers, including online Identifiers
- Internet Activity
- Location Information, including general location data
To the extent we process deidentified personal information, we will make no attempt to reidentify such data.
Information from other sources
We may collect personal information about you from third-party sources, including Ad Networks.
How long we keep your data
We do not retain data for any longer than is necessary for the purposes described in this Policy.
We generally retain data according to the guidelines below.| Type of Data | Retention Period |
|---|---|
| Cookies and online data we collect while you use our website, including Online Identifiers, Internet Activity | We delete or anonymize data concerning your use of our website within 36 months of collecting it. |
| Data we collect when you sign up for promotional and marketing communications, including Email address, Telephone number | When you have signed up to receive promotional and marketing communications from us, we will retain any data collected for 3 years or until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will also retain a record of any opt-outs to prevent sending you future communications. |
| Data we collect when you review our products, answer surveys, or send feedback, including Online Identifiers | We retain review, survey, and feedback data for up to 36 months following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services. |
| Data we collect in connection with privacy requests, including Name, Email address | We retain records related to privacy requests for at least 24 months after the request is completed. |
| Data we collect for security purposes, including Email address | We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures. |
Why we process your information
We process personal information for the following business and commercial purposes:
- Analyzing Data
- Improving our Products & Services
- Operating Our Website or Mobile Apps
- Sending Promotional Communications
- Storing and Managing Data
How we disclose your information
We may disclose personal information about you for business and commercial purposes when you Users:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Business Operations Tool, Collaboration & Productivity Tools, Data Analytics Providers, Engineering Contractors, IT Infrastructure Services, Sales & Marketing Tools, and Website Operations Tools | Ad Networks, Business Partners, and Sales & Marketing Tools |
| Location Information | Data Analytics Providers | Business Partners |
| Physical and Audio Data | Engineering Contractors | None |
| Inferences from Other Data | Data Analytics Providers and Engineering Contractors | Business Partners |
We may disclose personal information about you for business and commercial purposes when you Website Visitors:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Data Analytics Providers, IT Infrastructure Services, and Sales & Marketing Tools | Ad Networks and Sales & Marketing Tools |
| Internet Activity | Data Analytics Providers and Sales & Marketing Tools | Ad Networks |
| Location Information | Data Analytics Providers | None |
Information “sharing” and “selling”
We “share” certain personal information with third party ad networks for purposes of behavioral advertising, including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
We "sell" certain personal data to third parties, as that term is defined in the CCPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
You may opt-out of these data practices here.
We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.
Opt-out preference signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Your CCPA rights
Your privacy rights under the CCPA are described below. Make a Privacy Request by clicking here or by emailing us at privacy@careerkarma.com.
Right to Access
You have the right to access the specific pieces of personal information we have collected about you.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal information about you that you have provided to us. Subject to certain limitations, we will delete your personal information from our records and notify our service providers, contractors, and third parties that you have requested deletion of your personal information.
Right to Non-Discrimination
If you exercise your CCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
You have the right to opt-out of any selling and sharing of your personal information.
You may exercise your right to opt-out here.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Limit the Use of Sensitive Personal Information
The Right to Limit does not apply because we do not use your sensitive personal information to infer characteristics about you.
Request Verification
Before we can respond to a privacy request, we will verify that you are the consumer who is the subject of the CCPA request. Requests to Opt-Out or Limit the Use of Sensitive Data (if applicable) do not require verification.
Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity based on our records, we cannot fulfill your CCPA request.
Authorized Agent
A California resident's authorized agent may submit a rights request under the CCPA by emailing us at privacy@careerkarma.com. Requests submitted by an authorized agent will still require verification of the consumer who is the subject of the request in accordance with the process described above. We will also ask for proof that the consumer who is the subject of the request authorized an agent to submit a privacy request on their behalf by either verifying their own identity with us directly or directly confirming with us that they provided the authorized agent permission to submit the request. An authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 may also submit proof of statutory power of attorney, which does not require separate consumer verification.
If you have trouble accessing this notice, please contact us at privacy@careerkarma.com.
Contact Us
If you have any privacy-related questions or have trouble accessing this notice, please email privacy@careerkarma.com.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the California Attorney General’s Office or the California Privacy Protection Agency.
Colorado (CPA)
This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the CPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the CPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
CPA Rights
Your CPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Colorado Attorney General's Office.
Connecticut (CTDPA)
This section provides additional information for Connecticut residents under the Connecticut Data Privacy Act (CTDPA). The terms used in this section have the same meaning as in the CTDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CTDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@careerkarma.com.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the CTDPA, including Personal Identifiers, Location Information, and Inferences from Other Data. The specific third parties we've sold personal data to are: Schools.
We process personal data for purposes of targeted advertising (as defined in the CTDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Large Language Model Training
We do not process personal data for the purpose of training large language models.
CTDPA Rights
Your CTDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CTDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Profiling Rights
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Connecticut Attorney General’s Office.
Delaware (DPDPA)
This section provides additional information for Delaware residents under the Delaware Personal Data Privacy Act (DPDPA). The terms used in this section have the same meaning as in the DPDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the DPDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@careerkarma.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the DPDPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the DPDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
DPDPA Rights
Your DPDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your DPDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to List of Third Parties
You have the right to obtain a list of the categories of third parties to whom we have disclosed your personal data. You can also find that information in our Privacy Policy.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Delaware Attorney General's Office.
Florida (FDBR)
This section provides additional information for Florida residents under the Florida Digital Bill of Rights (FDBR). The terms used in this section have the same meaning as in the FDBR.
We do not sell your sensitive personal data.
Montana (MCDPA)
This section provides additional information for Montana residents under the Montana Consumer Data Privacy Act (MCDPA). The terms used in this section have the same meaning as in the MCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MCDPA.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MCDPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the MCDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
The MCDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MCDPA Rights
Your MCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Montana Attorney General’s Office.
Minnesota (MNCDPA)
This section provides additional information for Minnesota residents under the Minnesota Consumer Data Privacy Act (MNCDPA). The terms used in this section have the same meaning as in the MNCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MNCDPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MNCDPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the MNCDPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MNCDPA Rights
Your MNCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Obtain List of Third Parties
You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:
- Branch
- Meta Ads
- Schools
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MNCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Profiling Rights
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Minnesota Attorney General's Office.
Iowa (ICDPA)
This section provides additional information for Iowa residents under the Iowa Consumer Data Protection Act (ICDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the ICDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the ICDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in ICDPA.
Sensitive Data
We do not process consumers’ sensitive data.
ICDPA Rights
Your ICDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller. We will respond to your request within 90 days, with a possible 45-day extension if reasonably necessary.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your ICDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the ICDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Sensitive Data:
We do not process consumers’ sensitive data.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Iowa Attorney General's Office.
Indiana (INCDPA)
This section provides additional information for Indiana residents under the Indiana Consumer Data Protection Act (INCDPA). The terms used in this section have the same meaning as in the INCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the INCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the INCDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the INCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
INCDPA Rights
Your INCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your INCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the INCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Indiana Attorney General’s Office.
Kentucky (KYCDPA)
This section provides additional information for Kentucky residents under the Kentucky Consumer Data Privacy Act (KYCDPA). The terms used in this section have the same meaning as in the KYCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the KYCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the KYCDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the KYCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
KYCDPA Rights
Your KYCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your KYCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the KYCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Kentucky Attorney General’s Office.
Nebraska (NDPA)
This section provides additional information for Nebraska residents under the Nebraska Data Privacy Act (NDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@careerkarma.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the NDPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the NDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NDPA Rights
Your NDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your NDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Nebraska Attorney General's Office.
New Hampshire (NHPA)
This section provides additional information for New Hampshire residents under the New Hampshire Privacy Act (NHPA). The terms used in this section have the same meaning as in the NHPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NHPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@careerkarma.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the NHPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the NHPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NHPA Rights
Your NHPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your NHPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Hampshire Attorney General's Office.
New Jersey (NJDPA)
This section provides additional information for New Jersey residents under the New Jersey Data Privacy Act (NJDPA). The terms used in this section have the same meaning as in the NJDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NJDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@careerkarma.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the NJDPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the NJDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NJDPA Rights
Your NJDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your NJDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Jersey Attorney General's Office.
Maryland (MODPA)
This section provides additional information for Maryland residents under the Maryland Online Data Privacy Act (MODPA). The terms used in this section have the same meaning as in the MODPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MODPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@careerkarma.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MODPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the MODPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MODPA Rights
Your MODPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Obtain List of Categories of Third Parties
You have the right to obtain a list of the categories of third parties to whom we have disclosed personal data. You can also find that information in our Privacy Policy.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed or required by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MODPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Maryland Attorney General’s Office.
Rhode Island (RIDTPPA)
This section provides additional information for Rhode Island residents under the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA). The terms used in this section have the same meaning as in the RIDTPPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the RIDTPPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the RIDTPPA, including Personal Identifiers, Location Information, and Inferences from Other Data. The specific third parties we've sold personal data to are: Schools.
We process personal data for purposes of targeted advertising (as defined in the RIDTPPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
RIDTPPA Rights
Your RIDTPPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your RIDTPPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Rhode Island Attorney General’s Office.
Nevada (NPICICA)
This section provides additional information for Nevada residents under the Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA), Nevada Revised Statutes Chapter 603A. The terms used in this section have the same meaning as in NPICICA. This section does not apply to data that is not considered "covered information" as defined in the NPICICA.
NPICICA Rights
Your NPICICA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to review any covered information we have collected about you online.
Right to Delete
You have the right to request that we delete any covered information we have collected about you online. We will permanently delete any such covered information from our records and direct our processors to do the same. However, we may retain your covered information if it is necessary for certain purposes, as allowed by law.
Right to Correct
You have the right to correct inaccuracies in any covered information we have collected about you online, taking into account the nature of the data and our purposes for processing it.
Right to Opt-Out
We do not receive monetary consideration in exchange for your covered information and therefore do not sell your covered information as defined in the NPICICA.Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Third-Party Tracking
We use cookies and other technologies that allow third parties to collect covered information about your online activities over time and across different Internet websites or online services.
Oregon (OCPA)
This section provides additional information for Oregon residents under the Oregon Consumer Privacy Act (OCPA). The terms used in this section have the same meaning as in the OCPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the OCPA.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the OCPA, including Personal Identifiers, Location Information, and Inferences from Other Data. We do not knowingly "sell" the personal data of Oregon residents under the age of 16.
We process personal data for purposes of targeted advertising (as defined in the OCPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you. We do not knowingly process personal data of Oregon residents under the age of 16 for purposes of targeted advertising.
You may opt-out of these data practices here.
Profiling
The OCPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
OCPA Rights
Your OCPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Obtain List of Third Parties
You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:
- Branch
- Meta Ads
- Schools
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your OCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Oregon Attorney General’s Office.
Tennessee (TIPA)
This section provides additional information for Tennessee residents under the Tennessee Information Protection Act (TIPA). The terms used in this section have the same meaning as in the TIPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TIPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the TIPA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the TIPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
TIPA Rights
Your TIPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your TIPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Tennessee Attorney General's Office.
Texas (TDPSA)
This section provides additional information for Texas residents under the Texas Data Privacy and Security Act (TDPSA). The terms used in this section have the same meaning as in the TDPSA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TDPSA.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the TDPSA, including Personal Identifiers, Location Information, and Inferences from Other Data.
We process personal data for purposes of targeted advertising (as defined in the TDPSA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
The TDPSA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
TDPSA Rights
Your TDPSA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded, excessive, or repetitive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your TDPSA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Texas Attorney General’s Office.
Utah (UTCPA)
This section provides additional information for Utah residents under the Utah Consumer Privacy Act (UTCPA). The terms used in this section have the same meaning as in the UTCPA. This section does not apply to information that is not considered "personal data," such as deidentified, aggregated, or publicly available information as defined in the UTCPA.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the UTCPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in UTCPA.
UTCPA Rights
Your UTCPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or the request is manifestly unfounded or excessive, or it is part of an organized effort to harass, disrupt, or place undue burden on our business, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data you have provided to us. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your UTCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the UTCPA.
Targeted Advertising:
Exercise your right to opt-out here.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Utah Division of Consumer Protection.
Virginia (VCDPA)
This section provides additional information for Virginia residents under the Virginia Consumer Data Protection Act (VCDPA). The terms used in this section have the same meaning as in the VCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the VCDPA.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the VCDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in VCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
VCDPA Rights
Your VCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your VCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the VCDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Virginia Attorney General’s Office.
