beach
 

California Residents Privacy Policy

Effective Date:  March 25, 2025

California Privacy Notice (Updated CPRA and Delete Act Compliance)
This section supplements the information contained in our Privacy Policy and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA"), and other applicable California privacy laws. Any terms defined in the CCPA/CPRA have the same meaning when used in this section.

Information We Collect
The Services collect personal information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). We obtain this personal information through the methods described in the Personal Data We Collect section of our Privacy Policy. In particular, the Services have collected the following categories of personal information from consumers within the last twelve (12) months:

Category

Examples

Collected

A. Identifiers

Name, alias, postal address, unique personal identifier, photos, IP address, email, account name, etc.

YES

B. California Customer Records info

Name, signature, address, telephone, employment history, financial or medical info, etc.

YES

C. Protected classification characteristics

Age, race, religion, gender, disability, sexual orientation, etc.

NO

D. Commercial information

Records of products or services purchased, obtained, or considered

YES

E. Biometric information

Fingerprints, voiceprints, iris scans, etc.

NO

F. Internet activity

Browsing/search history, interaction with ads or sites

YES

G. Geolocation data

Physical location or movements

YES

H. Sensory data

Audio, electronic, or visual information

NO

I. Professional/employment data

Job history, evaluations

YES

J. Education info (FERPA)

Student records including grades, transcripts

YES

K. Inferences

Profiles reflecting preferences, intelligence, aptitudes

NO

L. Sensitive personal information (as defined under CPRA)

Government ID numbers, precise geolocation, racial/ethnic origin, union membership, genetic data, etc.

NO

We do not collect or use sensitive personal information for purposes that require offering consumers a right to limit under the CPRA.

Retention of Personal Information
We retain the personal information described above only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, unless a longer retention period is required or permitted by law. Criteria used to determine retention periods include the nature of the information, the purpose of collection, legal obligations, and our operational needs.

Use of Personal Information
We use or disclose the personal information we collect for the business purposes described in the How We Use Personal Data section of our Privacy Policy. We will not use or disclose the information for materially different, unrelated, or incompatible purposes without providing prior notice.

Sharing Personal Information
We disclose personal information to third parties for business purposes under contracts that restrict their use of the information to the specified services. The categories of third parties are detailed in our Privacy Policy.

In the last 12 months, we have disclosed the following categories for business purposes:

  • Identifiers
  • California Customer Records info
  • Commercial information
  • Internet activity
  • Education information

We do not sell or share personal information for cross-context behavioral advertising as defined under the CPRA. If that changes, we will update this policy and provide appropriate opt-out rights.

Global Privacy Control (GPC) Signals
We recognize and honor Global Privacy Control (GPC) signals as a valid consumer request to opt out of the sale or sharing of personal information.

Your Rights Under California Law You have the following rights under the CCPA/CPRA:

  1. Right to Know/Access: Request the categories and specific pieces of personal information we have collected, used, disclosed, and shared.
  2. Right to Delete: Request that we delete personal information we collected from you, subject to legal exceptions.
  3. Right to Correct: Request correction of inaccurate personal information maintained about you.
  4. Right to Opt-Out of Sale/Sharing: If applicable, request to opt out of the sale or sharing of your personal information.
  5. Right to Limit Use of Sensitive Personal Information: If collected and used beyond certain exemptions, you may request we limit the use of such information.
  6. Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.
  7. Right to Data Portability: Request a portable copy of your personal information.

Exercising Your Rights To exercise your rights, you may:

Only you, or someone legally authorized to act on your behalf, may make a verifiable request. Requests on behalf of minors must be made by a parent or legal guardian. You may submit a request twice within a 12-month period.

We may deny requests if we cannot verify your identity or authority. We will respond within 45 days and inform you of any extensions up to an additional 45 days. Responses will cover the 12-month period prior to the request and will be delivered electronically.

Delete Act Compliance (2023) While Boxlight is not classified as a data broker, we are aware of the California Delete Act and support consumer efforts to simplify data deletion. As centralized opt-out mechanisms become available, we will update our practices to support these processes.

Contact Information If you have any questions or wish to exercise your rights under California law, please contact us:

  • Email: [email protected]
  • Phone: 866.972.1549
  • Mail: Boxlight Data Protection Lead, 2750 Premier Parkway, Suite 900, Duluth, GA 30097

 

Back to top