About the California Consumer Privacy Act
The California Consumer Privacy Act of 2018 (“CCPA”) became effective on January 1, 2020 and creates a variety of privacy rights for California consumers.
California Consumer Privacy Act (CCPA) Notice applies to residents of California for whom we collect Personal Information.
What sort of Personal Information we may collect
Under the CCPA, “Personal Information” generally means information that identifies, relates to, or describes a California resident or household.
Below are details about the categories of Personal Information that we may have collected or disclosed during the last 12 months. The actual Personal Information that has been collected or disclosed within the following categories with respect to any particular California consumer in the last 12 months depends on the consumer’s particular interactions and relationship with us.
Information about the categories of Personal Information that we may collect is subject to annual review and update.
- Identifiers: Such as, name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
- Categories of Personal Information in Cal. Civ. Code 1798.80(e): Such as, name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
- Internet or Other Electronic Network Activity Information: Such as, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application or advertisement.
- Geolocation Data: Such as, precise physical location.
- Professional or Employment Related Information: Such as, job application or resume information, past and current job history, and job performance information.
- Inferences drawn from Personal Information: Such as, consumer profiles reflecting a consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behaviour, attitudes, intelligence, abilities, and aptitudes.
Where we collect your Personal Information from
We collect this Personal Information directly from California residents themselves, as well as from other sources, such as public databases, your employer and its employees, our affiliates, third-party sources of demographic information, and social media platforms.
How and why we use your Personal Information
We use this Personal Information to operate, manage, and maintain our business, to provide our products and services, to communicate with our customers, prospective customers, vendors, employees and other associated entities and persons, and to otherwise accomplish our business purposes and objectives.
Our business purposes and objectives include
- developing, improving, supporting, servicing and maintaining our products, services, customer relationships and employee relationships.
- personalising, advertising, and marketing our products and services.
- conducting research, analytics, and data analysis.
- maintaining our facilities and infrastructure.
- undertaking quality and safety assurance measures.
- conducting risk and security controls and monitoring.
- detecting and preventing fraud.
- performing identity verification.
- performing accounting, audit, and other internal functions, such as internal investigations.
- complying with law, legal process, and internal policies (including responding to requests from California residents under the CCPA).
- maintaining records; and exercising and defending legal claims.
We do not sell your Personal Information
Arrival does not sell your Personal Information.
You have the right to know whether your Personal Information is being sold. Your Personal Information is sold when it is shared with a third party for monetary or other valuable consideration for a purpose that is not a “business purpose” as set forth in the CCPA.
Your rights over your Personal Information
If you are a Californian resident, you have the following rights:
- Right to Know: You have the right to request that we disclose the information we have collected and retained about you over the past 12 months including:
- The categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information.
- The specific pieces of Personal Information we collected about you.
- The business or commercial purpose for collecting Personal Information about you.
- The categories of Personal Information about you that we otherwise shared or disclosed, and the categories of third parties with whom we shared or to whom we disclosed such Personal Information.
- Right to Receive: You have the right to request a copy of your personal information.
- To make a request for a copy of the Personal Information we hold about you, please email [email protected].
- Right to Delete: You have the right to request that we delete the Personal Information we collected about you.
- To make a request for deletion of your Personal Information, please email [email protected].
- Right to be Free from Discrimination: You have the right to be free from discrimination for exercising your rights under the CCPA.
We may deny a consumer request to delete Personal Information under the CCPA if this information is necessary for the business to:
- Complete the transaction for which the personal information was collected, provide goods or services requested by the consumer, or reasonably anticipated within the context of a business’ ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
- Debug to identify and repair errors that impair existing intended functionality.
- Exercise free speech ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent.
- To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business.
- Comply with a legal obligation.
- Otherwise use the consumer’s personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.
Timeframe for Responding to Consumer Personal Information Requests
We will acknowledge the Personal Information request within 10 business days and will provide information about how the business will process the request. In accordance with the CCPA, we will aim to respond to Personal Information requests within 45 calendar days of receipt of the request. However, we may need to exercise our right to extend the deadline to a maximum total of 90 calendar days when reasonably necessary. If this is the case, we will provide you with notice and an explanation for the need for an extension.
We hope this CCPA Notice has been helpful in setting out the way we handle your Personal Information and your rights to control it if you are a California resident.
If you have any questions that haven’t been covered, please contact our Legal Team who will be pleased to help you:
- Email us: at [email protected] (preferred)
- Write to us: at For the Attention of the Legal Team, Arrival UK Ltd, Beaumont House, Avonmore Road, London W14 8TS.
This Policy was last updated on 3rd November 2022.