Last updated: July 16, 2026
This notice explains how eFind handles Personal Information about California residents and describes the specific rights the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you. It is written for people, so you can read it and know exactly what we collect, why we collect it, who we share it with, and how to tell us to stop.
The California Consumer Privacy Act of 2018, as amended and expanded by the California Privacy Rights Act of 2020, gives California residents specific rights over the Personal Information that businesses collect about them. This notice exists to meet the disclosure requirements of that law and to put those rights in one place, in plain language. It tells you what categories of Personal Information we collect, where it comes from, why we use it, whom we disclose it to, whether we “sell” or “share” it as California law defines those words, and how you can exercise each right the law provides.
We wrote this notice to be read, not skimmed and forgotten. If a section raises a question, our privacy team is reachable at the contact points listed at the end, and we will help you understand your options before you decide whether to act on them.
This notice supplements, and does not replace, the eFind Privacy Policy. The Privacy Policy is the primary description of how we handle Personal Information across all of the Services. This notice adds the disclosures and rights that California law requires and applies specifically to Personal Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a California resident or that resident's household or Device. Where this notice and the Privacy Policy address the same subject, this notice controls for California residents on the points that California law governs; on all other points, the Privacy Policy applies.
This notice covers Personal Information that we process as a business, meaning information we collect about Users, visitors, Advertisers, Publishers, prospective customers, and others whose information we determine the purposes and means for handling. It does not cover Personal Information that we process only as a service provider or contractor on behalf of one of our business customers. When we act in that role, the customer that engaged us is responsible for its own privacy disclosures, and our handling is governed by the Data Processing Addendum and the customer's instructions.
Some information that reaches us through the advertising ecosystem belongs to an Advertiser or Publisher as the business, with eFind acting as a service provider. For that information, direct your requests to the business you dealt with. For information we control ourselves, use the request channels in this notice.
This notice applies to you if you are a natural person who resides in California, including a resident who is temporarily outside the state, whose Personal Information eFind collects and processes as a business. That includes California residents who visit our websites, use the Services, interact with Advertisements that we deliver, apply to advertise or publish with us, or otherwise communicate with us. California law refers to these individuals as “consumers,” and this notice uses “you” and “consumer” to mean the same thing.
This notice does not create rights for people who are not California residents, although residents of other states and regions have their own protections described in the Privacy Policy, the GDPR Privacy Notice, and other documents in the Trust Framework. Personal Information about a person acting in a purely business or employment capacity is still covered by this notice, because California law no longer carves those categories out.
Capitalized terms used in this document, such as Personal Information, Sensitive Personal Information, Services, Device, User, Advertiser, and Publisher, have the meanings given in the Master Definitions. Certain terms below carry the specific meaning California law assigns to them.
Think of the Privacy Policy as the complete picture of our data practices and this notice as the California-specific overlay on top of it. The Privacy Policy explains our practices for everyone; this notice restates them using the categories, labels, and disclosures that the CCPA requires, and it details the additional rights available only to California residents. If you read both, you will have the full account of how we treat your Personal Information and what you can do about it.
Nothing in this notice limits protections that the Privacy Policy or any other document in the Trust Framework already provides. Where California law sets a higher standard than our general practice, we apply the California standard to California residents.
Over the twelve months before the date of this notice, and on an ongoing basis, eFind collects the categories of Personal Information described below. California law organizes Personal Information into statutory categories, and the table maps what we collect to those categories. Not every consumer's information falls into every category, and the specific pieces we hold about any given person depend on how that person interacts with us.
| Statutory Category | Examples of What We Collect | Do We Sell or Share It? |
|---|---|---|
| Identifiers | Name, postal address, email address, phone number, account username, unique personal identifier, online identifier, IP address, Device identifier, and similar identifiers. | We do not sell it. We may share online identifiers and Device identifiers for cross-context behavioral advertising. |
| Customer records information | Contact details, billing and payment information, business and tax details, and account credentials collected when you register or transact with us. | No. |
| Commercial information | Records of Campaigns, Placements, inventory, transactions, purchase and consideration history, and the products or services you have engaged with through the Services. | No. |
| Internet or other network activity | Browsing and interaction history, Advertisement views, Clicks, Impressions, Conversions, search activity within the Services, and information about interactions with our sites, applications, and Advertisements. | We may share it for cross-context behavioral advertising. We do not sell it for money. |
| Geolocation data | Approximate location inferred from IP address or coarse Device signals. We do not intentionally collect precise geolocation through the Services. | We do not sell it. Coarse location may be shared for cross-context behavioral advertising. |
| Audio, electronic, and visual information | Recordings or transcripts of support calls, chat logs, and creative assets or media you submit in connection with the Services. | No. |
| Professional or employment information | Job title, employer, and business role provided during account setup, Business Verification, or hiring and vendor processes. | No. |
| Inferences | Profiles and predictions we derive from the above, such as interests, preferences, likely audience segments, and predicted advertising performance. | We may share advertising-related inferences for cross-context behavioral advertising. We do not sell them. |
| Sensitive Personal Information | Account log-in credentials, and, only where you provide them, government identifiers or financial account information used for verification, tax, or payment purposes. | No. We do not use or disclose it to infer characteristics, and we do not sell or share it. |
We do not knowingly collect the categories of Personal Information that California law defines as relating to a person's education records protected under federal law, and we do not intentionally collect biometric information, genetic data, or the contents of private communications through the Services. If any of these reach us incidentally, for example inside a creative asset or a support message, we handle them under this notice and delete them when they are no longer needed.
We collect Personal Information from the following categories of sources.
We collect and use each category of Personal Information for one or more of the following business or commercial purposes. We do not use Personal Information for purposes that are incompatible with the purpose for which we collected it without giving you notice.
We disclose Personal Information to the following categories of recipients for the business and commercial purposes above. When we disclose Personal Information to a service provider or contractor, we do so under a written contract that prohibits them from selling the information, from retaining or using it outside our instructions, and from combining it with information from other sources except as the law allows.
California law defines two specific activities with precise meanings. To “sell” Personal Information means to disclose it to a third party for monetary or other valuable consideration. To “share” Personal Information means to disclose it to a third party for cross-context behavioral advertising, whether or not money changes hands. These terms are broader than what most people picture when they hear the word “sell,” so we describe our practices carefully.
eFind does not sell your Personal Information for money, and we do not have a practice of exchanging your Personal Information for other valuable consideration in a way that meets the legal definition of a sale. We have not sold Personal Information in the twelve months before the date of this notice, and we do not intend to. If this ever changes, we will update this notice and provide the opt-out mechanisms the law requires before any such activity begins.
Advertising is our business, and some of our advertising activity may qualify as “sharing” under California law. When we use identifiers, Device identifiers, internet or network activity, coarse location, and advertising-related inferences to help target Advertisements to you based on your activity across different sites, applications, and services, that activity can meet the definition of sharing for cross-context behavioral advertising. We treat those activities as sharing so that you can exercise your opt-out right over them, even where a strict legal analysis might not require it.
The categories of Personal Information that we may share for cross-context behavioral advertising are identifiers (including online and Device identifiers), internet or other network activity information, coarse geolocation data, and inferences drawn for advertising. We share these categories with advertising partners and Publishers that participate in the advertising ecosystem. We do not share Sensitive Personal Information, customer records details, professional or employment information, or audio and visual records for cross-context behavioral advertising.
You can opt out of the sharing of your Personal Information for cross-context behavioral advertising at any time, and you do not need to have an Account to do so. See the Do Not Sell or Share My Personal Information section below for the two ways to opt out: our request channel and recognized browser signals such as the Global Privacy Control.
We do not sell your Personal Information for money. We may share advertising identifiers and activity for cross-context behavioral advertising, and you can turn that off at any time through the Do Not Sell or Share option or by using a Global Privacy Control signal.
California law identifies specific categories of Personal Information as sensitive and gives consumers the right to limit certain uses of it. The categories include a Social Security, driver's license, state identification, or passport number; account log-in credentials together with any access code; financial account details together with any access code; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; the contents of mail, email, and text messages where the business is not the intended recipient; genetic data; biometric information used to uniquely identify a consumer; information concerning health; and information about sex life or sexual orientation.
The only Sensitive Personal Information that eFind collects in the ordinary course is account log-in credentials, which we use to secure your Account, and, where you provide them for a specific purpose, a government identifier or financial account details used for Business Verification, tax reporting, or Payment. We collect these only for the limited operational purposes for which you provide them.
We do not use or disclose Sensitive Personal Information to infer characteristics about you. We use it only for purposes that California law recognizes as not triggering the right to limit, such as providing the Services you requested, securing accounts, preventing Fraud, verifying identity, processing Payments, and complying with the law. Because we confine our use of Sensitive Personal Information to these permitted purposes, the right to limit its use has no practical effect on how we handle it. Even so, you may exercise that right, and we describe how below.
If you are a California resident, you have the rights described in this section. We will not discriminate against you for exercising any of them.
You have the right to request that we disclose the categories and specific pieces of Personal Information we have collected about you, the categories of sources, the business or commercial purposes for collecting, selling, or sharing it, the categories of third parties to whom we disclosed it, and the categories that we sold or shared and the categories of recipients. You may request this information for the twelve months before your request and, for periods on or after January 1, 2022, for a longer period unless doing so proves impossible or involves disproportionate effort.
You have the right to request that we delete Personal Information we collected from you, subject to exceptions. We may retain information that is necessary to complete a transaction you requested, provide a good or service you asked for, secure our systems, detect and prevent Fraud, comply with a legal obligation, or exercise or defend legal claims, and for other purposes the law permits. When we grant a deletion request, we will delete your Personal Information from our records and direct our service providers and contractors to do the same, except where an exception applies.
You have the right to request that we correct inaccurate Personal Information we maintain about you, taking into account the nature of the information and the purposes of processing. We may ask you to provide information that helps us verify the accuracy of the correction you request.
You have the right to direct us not to sell or share your Personal Information. Because we do not sell Personal Information, this right primarily applies to sharing for cross-context behavioral advertising. You can exercise it through the Do Not Sell or Share option described below or by transmitting a recognized opt-out preference signal such as the Global Privacy Control.
You have the right to direct us to limit our use and disclosure of your Sensitive Personal Information to uses necessary to provide the Services and other uses the law permits. As explained above, we already confine our use of Sensitive Personal Information to those permitted purposes, so honoring this request does not change our handling. You may still submit the request, and we will confirm our practice.
You have the right not to receive discriminatory treatment for exercising any of your California privacy rights. We will not deny you Services, charge you a different price, or provide a different level or quality of Services because you exercised a right, except where a difference is reasonably related to the value of your data as permitted by law and offered through a financial incentive you choose to accept.
You can submit a request to know, access, delete, correct, opt out of sale or sharing, or limit the use of Sensitive Personal Information through any of the following channels.
To opt out of sale or sharing, or to limit the use of Sensitive Personal Information, you do not need to submit a verifiable request; a clear indication of your choice, including a recognized browser signal, is enough. For requests to know, access, delete, or correct, we must verify your identity before we act, as described below.
To protect your Personal Information, we verify that a request to know, access, delete, or correct comes from you or your authorized agent before we act on it. The verification we require depends on the sensitivity of the information and the risk of harm from an improper disclosure or deletion.
We use the information you provide for verification only to process your request, and we delete it afterward unless we are required to keep it.
You may use an authorized agent to submit a request on your behalf. If you do, we may require the agent to provide proof that you gave the agent written permission to act for you, and we may still ask you to verify your own identity directly with us or to confirm to us that you authorized the agent. If the agent holds a valid power of attorney under California law, we will not require these additional steps. We may deny a request from an agent who cannot provide the required proof.
We confirm receipt of a request to know, delete, or correct within ten business days and describe how we will process it. We respond substantively within forty-five calendar days of receiving a verifiable request. When we reasonably need more time, we may extend the period by an additional forty-five days, for a maximum of ninety days in total, and we will tell you the reason for the extension within the first forty-five days.
We act on a request to opt out of sale or sharing, or to limit the use of Sensitive Personal Information, as soon as feasibly possible and no later than fifteen business days from the date we receive it. We provide our responses free of charge in most cases. If a request is manifestly unfounded or excessive, in particular because it is repetitive, we may charge a reasonable fee or decline to act, and we will explain our decision.
You can tell us not to share your Personal Information for cross-context behavioral advertising in two ways, and you can use either or both.
Because an opt-out based on a browser signal or Cookie is tied to the specific browser or Device, you may need to renew your choice if you clear your Cookies, switch browsers, or use a new Device. We do not require you to create an Account to opt out.
If your browser or a browser extension sends a Global Privacy Control signal, we honor it as an opt-out of sharing for cross-context behavioral advertising, without requiring any further action from you.
We keep Personal Information only for as long as reasonably necessary for the purposes described in this notice and the Privacy Policy, unless a longer period is required or permitted by law. We do not retain Personal Information for longer than is reasonably necessary for each disclosed purpose. In deciding how long to keep information, we consider how long we need it to provide the Services, our legal and tax obligations, the need to resolve disputes and enforce agreements, and our fraud-prevention and security needs. When we no longer need Personal Information, we delete it or deidentify it in line with our internal schedules.
A financial incentive is a program that offers a different price, rate, level, or quality of goods or services in exchange for the collection, retention, sale, or sharing of Personal Information. eFind does not currently offer financial incentives or price or service differences tied to your Personal Information under the CCPA. If we introduce a financial incentive in the future, we will describe its material terms before you enroll, obtain your opt-in consent, explain how the value of your data relates to the incentive, and give you the ability to withdraw at any time.
The Services are directed to businesses and adults, and we do not knowingly sell or share the Personal Information of California residents under sixteen years of age without the affirmative authorization the law requires. If you believe we have Personal Information about a minor that should not have been collected, sold, or shared, contact us and we will investigate and take appropriate action.
We may update this notice to reflect changes in our practices, the Services, or the law. When we make a material change, we will update this notice and, where Applicable Law requires, provide additional notice. We encourage you to review this notice periodically so that you stay informed about your California privacy rights.
If you have questions about this notice or want help exercising your California privacy rights, contact the eFind Office of Trust and Legal.
Building Technology People Can Trust.
© 2026 eFind. All rights reserved.