California Privacy Notice
Date of Last Revision: March 29, 2024
This Notice describes how ShipBob, Inc. (together with any affiliated entities, “ShipBob,” “we,” or “us”) collects, uses, discloses, and otherwise processes personal information of California residents as a business under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (California Civil Code §§ 1798.100 to 1798.199) and its implementing regulations, as amended or superseded from time to time (“CCPA”).
Unless otherwise defined in this California Privacy Notice (this “Notice”), all terms defined in the Privacy Policy and all other terms defined in the CCPA have the same meaning when used in this Notice.
This Notice supplements the information contained in our Privacy Policy and applies to the personal information of residents of the State of California (collectively, “you” or “your”) created, received, transmitted or maintained by us or on our behalf. When we refer to “personal information” in this Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by the CCPA.
Personal information does not include information that is:
- Lawfully made available from government records.
- Deidentified or aggregated.
- Otherwise excluded from the scope of the CCPA.
The chart below provides the categories of personal information and sensitive personal information (as defined by the CCPA) we have collected, disclosed for a business purpose, or sold or “shared” (for cross-context behavioral advertising purposes) in the preceding twelve months. The examples of Personal Information and Sensitive Personal Information provided for each category reflect each category’s statutory definition and may not reflect all of the specific types of personal information and sensitive personal information associated with each category.
| Category | We Collected | We Disclosed | We Sold/ Shared |
| A. Identifiers Examples: Name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, and other similar identifiers. | Yes | Yes | Yes |
| B. Categories of Personal Information in Cal. Civ. Code Section 1798.80(e) Examples: Name, signature, address, telephone number, social security number, driver’s license number, and passport number. | Yes | Yes | Yes |
| C. Characteristics of Protected Classifications under California or Federal Law Examples: Race or color, ancestry or national origin, religion or creed, age (over 40), mental or physical disability, sex (including gender and pregnancy, childbirth, breastfeeding or related medical conditions), sexual orientation, gender identity or expression, medical condition, genetic information, marital status, military and veteran status. | No | N/A | N/A |
| D. Commercial Information Examples: Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Yes | Yes | No |
| E. Biometric Information Examples: Physiological, biological, or behavioral characteristics, including DNA, that can be used, singly or in combination with each other or with other identifying data, to establish individual identity, such as imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information. | No | N/A | N/A |
| F. Internet or Other Electronic Network Activity Information Examples: Browsing history, search history, and information regarding a consumer’s interaction with an internet website, application or advertisement. | Yes | Yes | Yes |
| G. Geolocation Data Example: Precise physical location. | No | N/A | N/A |
| H. Sensory Information Examples: Audio, electronic, visual, olfactory, or similar information. | Yes | Yes | No |
| I. Professional or Employment-Related Information Examples: Job application or resume information, past and current job history, and job performance information. | Yes | Yes | No |
| J. Non-Public Education Information (as defined in 20 U.S.C. 1232g; 34 C.F.R. Part 99) Examples: Records that are directly related to a student maintained by an educational agency or institution or by a party acting for the agency or institution. | No | N/A | N/A |
| K. Inferences Drawn from Personal Information Examples: Consumer profiles reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | No | N/A | N/A |
| L. Sensitive Personal Information (Identifiers) Examples: A consumer’s social security, driver’s license, state identification card, or passport number. | Yes | Yes | No |
| M. Sensitive Personal Information (Log-In and Financial Information) Examples: Account log-in in combination with any required security or access code, password, or credentials allowing access to an account. | Yes | No | No |
| N. Sensitive Personal Information (Precise Geolocation) | No | N/A | N/A |
| O. Sensitive Personal Information (Group Membership) Examples: Racial or ethnic origin, religious or philosophical beliefs, or union membership. | No | N/A | N/A |
| P. Sensitive Personal Information (Contents of Communications) Examples: The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication. | No | N/A | N/A |
| Q. Sensitive Personal Information (Genetic Data) | No | N/A | N/A |
| R. Sensitive Personal Information (Identifying Biometric Information) | No | N/A | N/A |
| S. Sensitive Personal Information (Personal Information Collected and Analyzed Concerning a Consumer’s Health) | No | N/A | N/A |
| T. Sensitive Personal Information (Personal Information Collected and Analyzed Concerning a Consumer’s Sex Life or Sexual Orientation) | No | N/A | N/A |
Collection of Personal Information
We collect personal information from the following categories of sources:
- You/Your Devices: You or your devices directly.
- Customers: From our customers to provide you with the services.
- Affiliates.
- Analytics Providers.
- Partners: Business partners.
- Public: Publicly accessible sources.
Use of Personal Information
We collect your Personal Information for the following specific business and commercial purposes:
- Providing Services: Providing our Services, including onboarding you to the Services, authenticating your platform access, keeping records of the transactions you manage through the platform, and operating our website.
- Communicating: Communicating with you, providing you with updates and other information relating to our Services (e.g., order updates, inventory status, etc.), providing information that you request, responding to comments and questions, and otherwise providing customer support.
- Marketing: Marketing purposes, such as developing and providing promotional and advertising materials that may be useful, relevant, valuable, or otherwise of interest to you.
- You can opt out of marketing communications by clicking the “Unsubscribe” (or similarly named) link at the bottom of our emails.
- Personalization: Personalizing your experience on our Services, such as presenting tailored content.
- Deidentification and Aggregation: Deidentifying and aggregating information collected through our Services and using it for lawful purposes.
- Job Applications: Processing your job application.
- Safety Issues: Responding to trust and safety issues that may arise.
- Compliance: For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.
- Auditing Interactions: Auditing related to your interaction with our Services and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with other standards.
- Fraud and Incident Prevention: Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
- Debugging: Debugging to identify and repair errors that impair existing intended functionality.
- Transient Use: Short-term, transient use.
- Contracting Vendors: Contracting with vendors and service providers to perform services on our behalf or on their behalf, including maintaining or servicing accounts, providing customer service, providing AI-powered chatbot services, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytics services, or providing similar services on behalf of the business or service provider.
- Research: Undertaking internal research for technological development and demonstration.
- Improving Our Services: Undertaking activities to verify or maintain the quality or safety of our Services, and to improve, upgrade, or enhance our Services.
- Enabling Transactions: Otherwise enabling or effecting, directly or indirectly, a commercial transaction.
- Notified Purpose: For other purposes for which we provide specific notice at the time the information is collected.
Disclosure of Personal Information
In the preceding twelve months, we disclosed personal information to the following categories of third parties for the purposes of providing services, communicating, marketing, personalization, deidentification and aggregation, job applications, safety issues, compliance, auditing interactions, fraud and incident prevention, debugging, transient use, contracting vendors, research, improving our services, enabling transactions, and for any notified purpose:
- Affiliates.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), Commercial Information, Internet or Other Electronic Network Activity Information, Sensory Information, Professional or Employment-Related Information, and Sensitive Personal Information (Identifiers).
- Customers.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), Commercial Information, Internet or Other Electronic Network Activity Information, Sensory Information, and Professional or Employment-Related Information.
- Analytics Providers.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), Commercial Information, Internet or Other Electronic Network Activity Information, and Professional or Employment-Related Information.
- Vendors: Vendors and service providers.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), Commercial Information, Internet or Other Electronic Network Activity Information, Sensory Information, Professional or Employment-Related Information, and Sensitive Personal Information (Identifiers).
- Third Parties as Legally Required: Third parties as required by law and similar disclosures.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), Commercial Information, Internet or Other Electronic Network Activity Information, Sensory Information, and Professional or Employment-Related Information.
Selling and Sharing of Personal Information
In the preceding twelve months, we sold or shared personal information to the following categories of third parties for the purposes of providing services, communicating, marketing, personalization, deidentification and aggregation, job applications, safety issues, compliance, auditing interactions, fraud and incident prevention, debugging, transient use, contracting vendors, research, improving our services, enabling transactions, and for any notified purpose:
- Affiliates.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), and Internet or Other Electronic Network Activity Information.
- Customers.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), and Internet or Other Electronic Network Activity Information.
- Analytics Providers.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), and Internet or Other Electronic Network Activity Information.
- Vendors: Vendors and service providers.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), and Internet or Other Electronic Network Activity Information.
- Third Parties as Legally Required: Third parties as required by law and similar disclosures.
- Personal information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code Section 1798.80(e), and Internet or Other Electronic Network Activity Information.
Your California Privacy Rights
As a California resident, you may be able to exercise the following rights in relation to the personal information that we have collected about you (subject to certain limitations and exceptions at law).
| Right to Know and Access | The right to request the following information relating to the personal information we have collected, sold, shared, and disclosed about you: Categories of personal information collected, sold, shared or disclosed by us; Purposes for which categories of personal information are collected, sold, shared, and disclosed by us; Categories of sources from which we collect personal information; Categories of third parties to whom we sold, shared, or disclosed personal information; and Specific pieces of personal information we have collected about you during the past twelve months. |
| Right to Correct | The right to request that we correct your inaccurate personal information maintained by us. |
| Right to Request Deletion | The right to request the deletion or erasure of personal information we have collected from you, subject to certain exceptions. |
| Right to Opt Out of Data Sales or Sharing | The right to direct us not to sell or share (for cross-context behavioral advertising purposes) personal information we have collected about you to third parties. |
| Right to Limit Use and Disclosure of Sensitive Personal Information | The right to direct us to limit our use and disclosure of your sensitive personal information. |
| Right of No Retaliation | The right not to receive discriminatory treatment for the exercise of your CCPA privacy rights, subject to certain limitations, including if you are an employee, applicant, or independent contractor of our business. |
| California’s Shine the Light Law | As provided by California Civil Code § 1798.83, California residents that have an established business relationship with us can request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year or to have the right to opt-out of such disclosures. |
How to Exercise Your California Privacy Rights
If you would like to submit a verifiable request to exercise your rights noted above, you can do so by emailing us at [email protected]. We may ask for certain information to verify your identity in light of the information requested and pursuant to relevant CCPA requirements, limitations, and regulations. We will only use the personal information provided in connection with a privacy rights request to review and comply with the request. If you do not provide this information, we may not be able to verify or complete your request.. We will only use the personal information provided in connection with a privacy rights request to review and comply with the request. If you do not provide this information, we may not be able to verify or complete your request.
Authorized Agents
If you are acting as an authorized agent to make a request to know, delete, correct, or opt out on behalf of a California resident, please email us at [email protected], and attach a written authorization signed by the resident.
Exercising Your Right to Opt Out of Personal Information Sales or Sharing
You do not need to create an account with us to exercise your Right to Opt Out of Personal Information Sales or Sharing. However, we may ask you to provide additional personal information (including your name, email address and mailing address) so that we can properly identify you in our dataset to facilitate the opt-out request. If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems.
Once you make an opt-out request, you may change your mind and opt back into personal information sales at any time by contacting us at [email protected].
To exercise your right to opt-out of personal information sales or sharing for targeted or cross-contextual advertising, please click the cookie icon on the bottom left of your screen to edit your preferences.
Please see the section titled Cookies and Tracking Technologies in our Privacy Policy for additional information on how you may exercise your choice over personal information collected through cookies and other tracking technologies and used for advertising purposes.
Exercising Your Right to Limit Use and Disclosure of Sensitive Personal Information
In some circumstances, you may limit our use and disclosure of your sensitive personal information. We do not use or disclose your sensitive personal information for purposes other than the limited purposes permitted by the CCPA.
Opt-Out Preference Signals
You may also opt out of the sale or sharing (for cross-context behavioral advertising purposes) of your Personal Information by turning on the Global Privacy Control (GPC) in participating browser systems. You will need to turn the GPC on for each browser you use. To learn more about the GPC, visit the Global Privacy Control website.
Minors
We do not knowingly sell or share (for cross-context behavioral advertising purposes) personal information of consumers under 16 years of age.
Contact Us
If you have questions about this Notice, please contact ShipBob at:
ShipBob, Inc., 120 N. Racine Ave., #100, Chicago, IL 60607, (844) 474-4726, or [email protected].
Changes to the Notice
We may update this Notice at any time and may apply changes to previously collected information, as permitted by applicable law. We will post any changes to this Notice on the website and will indicate the last updated date of the changes. Your continued use of the website covered by this Notice indicates your consent to the changes as of the last updated date indicated on this Notice.
