Privacy Policy Supplement for California Residents

Notice at Collection and Privacy Policy Supplement for California Residents (“California Privacy Notice”)

Policy effective and last reviewed December 29, 2022

This California Privacy Notice, which supplements our general Privacy Policy, only applies to residents of California who use our Site or Services. If you are not a resident of California, this section does not apply to you.

Note that Noridian has separate notices for employees and applicants who are California residents.

Noridian provides this California Privacy Notice pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively the “CCPA”), to the extent our practices may be covered under the CCPA. Terms that are capitalized are defined in the California law.

This California Privacy Notice includes information about the Personal Information collected about Consumers in the preceding 12 months and Personal Information that will be collected about Consumers.

Categories of Personal Information Collected

We may collect the following categories of Personal Information from or about you:

For additional details, please see INFORMATION WE COLLECT, in our general Privacy Policy.

Categories of Sources of Personal Information

Noridian obtains the categories of Personal Information listed above from the following categories of sources:

Directly from you. We collect Personal Information that you provide to us. For example, we collect Personal Information from forms you complete online or from RFP responses.
Indirectly from you. For examples, we collect information by observing your actions on our Site or from information your computer or other device transmits when interacting with our Site, among other things.
From Service Providers, Vendors, and Other Third Parties. We may collect information about you from our partners.

Purposes for Collecting Personal Information

We may collect Personal Information for the business or commercial purposes listed in HOW WE USE INFORMATION in our general Privacy Policy.

Personal Information Disclosed for Business Purposes

Categories of Entities to Whom Noridian Discloses Personal Information for a Business Purpose.

Noridian may disclose your Personal Information for a business purpose, including to our service providers, affiliates, and third parties with whom you direct us to share your Personal Information. For more information, see HOW WE DISCLOSE INFORMATION in our general Privacy Policy.

Categories of Personal Information Disclosed for a Business Purpose.

Noridian has disclosed the following categories of Personal Information for a business purpose:

“Selling” and “Sharing” Personal Information

As defined by the CCPA, we do not Sell and Share Personal Information. Noridian does not have actual knowledge that it Sells or Shares Personal Information about Consumers under 16 years of age.

Retention Policy

The criteria we may use to determine retention of information: the type of data; whether you have provided your consent and have not withdrawn it; whether the information is subject to a deletion request; and whether retention is necessary to comply with legal obligations.

Your CCPA Consumer Rights

The CCPA provides Consumers with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.

Exercising Your CCPA Rights

To exercise the access, data portability, correction and deletion rights described above, please submit a verifiable Consumer request to us by either:

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. The verifiable Consumer request must:

You may only make a verifiable Consumer request for access or data portability twice within a 12-month period.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

Making a verifiable Consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable Consumer request to verify the requestor’s identity or authority to make the request.

CCPA Response Timing and Format

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.