Background

This Privacy Notice for California Residents (“Notice”) supplements the information contained in the “Privacy Policy” tab of Complete Discovery Source, Inc’s (“CDS” or “we”) website (the “Site”). The Notice applies to all users of the Site who reside in the State of California (”consumers” or “you”). CDS adopts this Notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act (“CPRA”).

CDS’ Collection of Personal Information

The Site may collect “personal information,” which is defined in the CCPA, as information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household (”personal information”). Below is a chart setting forth the various types of personal information and whether CDS, through the Site, has collected such information from users of the Site within the last twelve (12) months.

Personal information does not include:

• Publicly available information from government records
• De-identified or aggregated consumer information
• Information excluded from the scope of the CCPA, including:
  • Health-related information under the Health Insurance Portability and Accountability Act of 1996 and the California Confidentiality of Medical Information Act; and
  • Personal information subject to the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, the California Financial Information Privacy Act, and the Driver’s Privacy Protection Act of 1994

Use and Disclosure of Personal Information

CDS may use or disclose the personal information it collects as follows:

• If a user of the Site chooses to send CDS a message via the Site regarding CDS’ services or products, CDS will use the personal information supplied to respond to the message. Similarly, if a user of the Site seeks to download information contained in the
• Site (e.g., a whitepaper), CDS will use the personal information supplied to fulfill the request.
• CDS may disclose personal information as required by law, regulation or the rules of practice of a governmental or quasi-governmental body. CDS may also disclose personal information to law enforcement officials in response to a lawful request. Though we do not currently anticipate a change in our ownership, in the event of the sale of the company or a significant portion of its assets, CDS may disclose or transfer personal information to a purchasing party.
• CDS may, with user consent, use “cookies” (i.e., small files that reside on the user’s computer or other digital device), to tailor its marketing efforts based on the portions of the Site the user visits.
• CDS may use personal information as otherwise set forth in the CCPA.

Sales of Personal Information

CDS does not sell personal information under any circumstances.

Sharing of Personal Information

CDS may disclose personal information to a third party in connection with a valid business purpose. In the event CDS discloses personal information to a third party for a business purpose, CDS will put a contract in place with the third party (i) describing the business purpose, (ii) stating that the third party will only use the personal information for the business purpose described, (iii) requiring the third party to maintain the confidentiality of the personal information, and (iv) stating that the third party is prohibited from selling the personal information; (v) stating that the third party is prohibited from re-identifying any personal information that has been de-identified. In the preceding twelve (12) months, CDS has not disclosed personal information in connection with a business purpose.

Your CCPA/CPRA Rights and Choices

As a consumer in the state of California, you have certain rights and choices regarding your personal information. , California consumers have a right to: (1) request access, correction, and deletion of their personal information; (2) opt out of the sale or sharing of their personal information; and (3) not be discriminated against for exercising one of their California privacy rights.

Your Right to Access Personal Information and to Data Portability

You have the right to request that CDS disclose certain information to you about its collection and use of your personal information over the past twelve (12) months. Once CDS receives your request, and verifies your identity, CDS will inform you of:

• The categories of personal information CDS has collected about you
• The categories of sources for the personal information CDS has collected about you
• CDS’ business purpose for collecting your personal information
• The categories of third parties with whom we share that personal information
• The specific pieces of personal information we collected about you
• Whether CDS has disclosed your personal information for a business purpose and, if so, inform you of the personal information categories that each category of recipient received

Your Right to Request Correction or Deletion

Subject to certain exceptions, you have the right to request that CDS delete any of your personal information CDS has collected and retained. Additionally, you have the right to request the correction of any personal information that CDS has collected and retained. Upon receipt and confirmation of your identity, CDS will delete (and ensure that any third parties to whom CDS has disclosed your personal information delete) your personal information from CDS’ records or make corrections to any of your personal information per your instructions.

CDS may deny your request for deletion if retaining the personal information is necessary for CDS (or any third party with whom CDS has shared your personal information) to:

• Comply with a legal mandate
• Provide the service you have requested, but only until such time as the service is complete
• Investigate security incidents, malicious activity, deceptive activity, fraudulent activity, and illegal activity, including the prosecution of any person(s) responsible for the activity
• Exercise any rights, or ensure the rights of another consumer, provided for by law, including the right of free speech
• Comply with the California Electronic Communications Privacy Act (CalECPA, SB 178)
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest (provided that such research adheres to all other applicable laws and ethical mandates) when (i) deletion of the personal information could seriously impair or likely render impossible the research, and (ii) you previously provided informed consent to participate
• Based on your relationship with CDS, make internal uses of the personal information which are reasonably aligned with your consumer expectations
• Make other internal and lawful uses of the personal information which are consistent with the context in which you provided the information

Exercising Your Access, Data Portability and Deletion or Correction Rights

To exercise your access, data portability and deletion or correction rights set forth above, please submit a verifiable consumer request to CDS by sending CDS a message on our website. Only you, or a person registered with the California Secretary of State whom you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

In order to respond to your request, CDS must be able to verify your identity / authority to make the request. CDS must also verify that the personal information about which you inquire relates to you. CDS will only use your personal information submitted in connection with a verifiable consumer request to authenticate the identity of the requestor or, if applicable, your authority to make the request on behalf of another.

Response Timing and Format

CDS strives to respond to all verifiable consumer requests within forty-five (45) days of receipt of a valid request. Should CDS require additional time to respond to your valid consumer request (which will not exceed 90 days), CDS will inform you of the reason and extension period in writing. At your preference, CDS will provide a written response to your valid consumer request via physical mail or e-mail. Any disclosures CDS provides will (i) be limited to your personal information CDS receives in the twelve- (12) month period preceding your request, and (ii) set forth the reason(s) CDS is unable to comply with the request, if applicable. For any data portability requests, CDS will provide the personal information in a readily usable format to allow you to transmit the information from one entity to another.

CDS does not charge a fee to process your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If CDS determines your request warrants a fee, CDS will, in writing, explain why CDS is charging a fee and include an estimate of the fee prior to processing your request.

Non-Discrimination

CDS will not discriminate against you for exercising any right(s) you have under the CCPA or the CPRA. Unless the CCPA/CPRA specifically permits it, CDS will not:

• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties
• Deny you goods or services
• Provide you a different level or quality of goods or services, or charge you a different price / rate for our goods and services

CDS may offer you certain financial incentives permitted by the CCPA, which may result in different prices, rates, or quality levels for CDS’ goods and services. Any CCPA-permitted financial incentive we offer will reasonably relate to the value of your personal information and contain written terms describing the pertinent characteristics of the incentive. The CCPA requires your consent (i.e., opt-in) to participate in a financial incentive program, which consent you have a right to revoke at any time.

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of the Site that are California residents to request a list of all third parties to whom CDS has disclosed Personal Data during the preceding year for direct marketing purposes. Alternatively, the law provides that if a company has a privacy policy that gives either an opt-out or opt-in choice for use of your Personal Data by third parties (such as advertisers) for marketing purposes, the company may instead provide you with information on how to exercise your options. CDS has a comprehensive Notice and provides you with details on how you may opt-out of the use of your Personal Data by third parties for direct marketing purposes. Therefore, we are not required to maintain or disclose a list of third parties that received your Personal Data for marketing purposes during the preceding year. To make such a request, please send CDS an e-mail through the Site or write to CDS at the address of its headquarters listed on the Site.

Amendments to this Privacy Notice

CDS may amend this Notice from time-to-time by posting a revised Notice on the Site, which is located at http://www.cdslegal.com. CDS will only amend this Notice in a manner consistent with the requirements of California law. When CDS amends this Notice, we will post the updated notice to the Site and update the effective date of the Notice. Your continued use of the amended Site constitutes your acceptance of any updates made. This Notice was updated on June 28, 2023.

Inquiries

Should you wish to communicate with CDS about the contents of this Notice, the ways in which CDS collects and uses your personal information, your choices and rights regarding such collection and use, or your desire to exercise rights under California law, please contact the following CDS representative:

Dino E. Medina, Esq.
General Counsel
250 Park Avenue, Floor 18
New York, NY 10177
Phone (toll free): 855-813-0700
E-mail: