Compliance
Updated & Effective: January 1st, 2024
We are dedicated to respecting your privacy and safeguarding your personal data. This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Policy of Traffic2Leads and its subsidiaries (collectively, “we,” “us,” or “our”) and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”).
This CCPA Privacy Notice aims to inform you about how we handle personal information in compliance with the California Consumer Privacy Act (CCPA).
Information We Collect
Traffic2Leads collects information that identifies, relates to, or could be reasonably linked with a particular California resident or household. The categories of personal information we may collect include:
Identifiers: Such as name, postal address, unique personal identifier, email, phone number, IP address, and online identifiers.
Internet activity: Including, but not limited to, browsing history, search history, and information regarding interactions with our website or advertisements.
Geolocation data.
Inferences drawn from any of the information identified to create a profile about a consumer.
Purpose of Information Collection
We collect this information for various purposes, including:
To provide and improve our services.For customer service and support.
To communicate with you about our services, offers, promotions, and events.For internal research and analytics.
To ensure the security and integrity of our services.
To comply with legal obligations.
How We Share Personal Information
We may share your personal information with third parties for business purposes. These third parties include:
Service providers.
Advertising partners.
Affiliates and subsidiaries.
In connection with a merger, sale, or asset transfer.
Your Rights Under the CCPAs a California resident, you have the right to:
Know about the personal information we collect about you and how it is used and shared.
Request deletion of your personal information.
Opt-out of the sale of your personal information.
Non-discrimination for exercising your CCPA rights.
How to Exercise Your Rights
To exercise any of these rights, please submit a verifiable consumer request to us by Email to: support@traffic2leads.ai
We will verify your identity before processing your request.
You may also designate an authorized agent to make a request on your behalf.Non-Discrimination Statement
We will not discriminate against you for exercising any of your CCPA rights.
Unless permitted by the CCPA, we will not:
Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Changes to This Privacy Notice
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on our website and update the notice's effective date.
Contact Information
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your information described here, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at: support@traffic2leads.ai
Disclaimer: This summary is for your information only and does not serve as legal advice. If you need help with CAN-SPAM Act compliance, please consult a legal professional.
Introduction
The CAN-SPAM Act, established in 2003, sets rules for commercial emails and defines penalties for violations. It applies to any email whose main goal is advertising or promoting a product or service. The Act also covers 'transactional or relationship' emails but with different requirements.
Key Aspects of CAN-SPAM
Email Content Regulations: No misleading information in the email headers (like the "From," "To," "Reply-To" sections).
Subject lines must honestly represent the email's content.
Clearly identify the message as an advertisement.Include your valid physical postal address.
Opt-Out Mechanism:You must provide a clear way for recipients to opt out of receiving future emails.
Opt-out requests must be processed within 10 business days.
You cannot sell or transfer email addresses of those who have opted out.
Commercial vs. Transactional Emails:
Commercial emails primarily promote a product or service. Transactional emails relate to an ongoing business relationship or transaction.
The Act has different rules for these types of emails, especially around content and header information.
No prior Consent Needed
Unlike some jurisdictions, the U.S. is an 'opt-out' country for commercial emails, meaning you can send them until someone opts out.
However, you can't send to those who have already opted out.
Email Harvesting and Generation
It's illegal to collect email addresses using automated methods from websites, especially if the website says it won't share email addresses for sending emails.
Randomly generating email addresses for sending emails is also prohibited.
Responsibility for Compliance
Even if you outsource your email marketing, you're still responsible for complying with the law.
This includes ensuring opt-out requests are respected and that the content is appropriate.
Note: As of February 12, 2019, the FTC reaffirmed that the Act does not require recipients to opt-in to receive emails. However, emails must contain a clear notice about how to opt out.
For Businesses
If you're part of a joint-marketing email, ensure compliance with the Act by all parties.
Avoid sending sexually-explicit material unless it meets the Act’s specific requirements.
Remember, this is a summary and the law may change.
Always stay updated and consult with legal experts for compliance.
COLORADO PRIVACY LAWS - Overview of the Colorado Privacy Act (CPA)
Disclaimer: This summary of the Colorado Privacy Act (CPA) is meant for informational purposes only and isn't legal advice. It's not a complete guide to the CPA, and we're not forming an attorney-client relationship. If you have specific questions about the CPA, please talk to your lawyer.
Background
On July 7, 2021, Colorado's Governor Jared Polis signed the CPA into law. It's expected to undergo changes before and after it starts on July 1, 2023.
Who It Affects
The CPA targets businesses focusing on Colorado consumers and involves two main groups:
Businesses handling data of 100,000+ Colorado consumers per year.
Those handling data of 25,000+ consumers and earning revenue from selling this data.
Key Points
The CPA doesn't cover all data, like employment records or data governed by specific laws.
Colorado consumers get new rights: access, opt-out, correction, deletion, data portability, and appeal.
Businesses must be transparent, minimize data use, protect data, and get consent for sensitive data.Enforcement is by the attorney general and district attorneys, not individuals.
What’s Next
The law takes effect on July 1, 2023, but amendments are expected.
Businesses’ Responsibilities
Clear privacy notices outlining what data is collected and shared.
Collect only what's necessary and be clear about the purpose.
Secure data appropriately.
Handle sensitive data with extra care, including getting consent.
For Processors
Those processing data for others must follow specific rules and agreements, similar to those in the GDPR, ensuring data security and compliance.
NOTE: Remember, this is just an overview, and the details might change. Keep an eye on updates and consult a legal expert for how it applies to your business.
Disclaimer: This is just an informational summary of the CDPA and not legal advice. For specific legal questions about the CDPA, please consult a lawyer.
Introduction
On March 2, 2021, Virginia passed the CDPA, a law similar to California’s Privacy Rights Act and the European GDPR.
Businesses already compliant with CCPA or GDPR will find a few differences in the CDPA.
The CDPA is effective from January 1, 2023.
Key Points of CDPA
Consumers get broad rights: access, correct, delete, opt-out of data processing, non-discrimination, and appeal rights.
Sensitive data requires opt-in consent.
The law impacts certain businesses based on data processing volume and revenue from data sales.
Scope of the CDPA
Personal Information: Broadly defined as any information linked or linkable to a person.
Consumers: Only includes Virginia residents in personal or household contexts, not in business or employment contexts.
Thresholds: Applies to businesses processing data of 100,000+ consumers or 25,000+ consumers with revenue from data sales.
Excluded Organizations: Government, non-profits, HIPAA-covered entities, financial organizations under GLBA, higher education institutions.
Excluded Information: Employee data, GLBA, HIPAA, FERPA, Fair Credit Reporting Act data.
Sale Definition: CDPA sees a sale as exchanging data for money, narrower than CCPA's definition.
Consumer Rights under CDPA
Access and Obtain Data: Get personal data in a portable format.
Correct Data: Fix inaccuracies.
Delete Data: Remove personal data.
Opt-Out Rights: For data sales, profiling, and targeted advertising.
Non-Discrimination: Businesses can’t treat consumers differently for exercising their rights.
Appeal Rights: Challenge a business's decision on data requests.
Sensitive Data: Opt-in consent required, including for children under 13 (complying with COPPA).
New Responsibilities for Businesses
Data Minimization: Collect only necessary data.
Use Limitations: Data processing must align with purposes disclosed to consumers.
Reasonable Security: Protect data properly.
Disclosure Requirements: Notify about data sales and targeted advertising.
Privacy Notices: Be transparent about data use and consumer rights.
Data Protection Assessments: Required for certain types of data processing.
Processor Requirements
Follow the controller's instructions and help with CDPA compliance.
Enforcement
No private lawsuits, but a 30-day cure period for violations.
Potential penalties up to $7,500 per violation after the cure period.
NOTE: Remember, this is just a general guide. Stay updated and consult legal experts for compliance.
Disclaimer: This is just an informational summary of the FCRA and not legal advice. For specific legal questions about the FCRA, please consult a lawyer. The below also clarifies restricted use cases for prospective users of this tool.
The Fair Credit Reporting Act (FCRA) sets rules for the use of personal information in decisions like employment, credit, and housing.
In such cases, the entity using your info must do two things:
Notify you that they'll access your public or private records.
Inform you about the source of this information if it leads to an adverse decision.
Businesses that supply this information, such as to employers or landlords, are called Consumer Reporting Agencies (CRAs).
Under the FCRA, Traffic2Leads is not a consumer reporting agency.
This designation comes with specific limitations on how you can use Traffic2Leads.
The following points offer a quick overview of these restrictions.
We advise you to familiarize yourself with the FCRA.
Restricted Uses of Traffic2Leads:
Employment Screening: Traffic2Leads must not be used for evaluating a person for employment, reassignment, promotion, or retention.
Tenant Screening: Applicable to leasing residential or commercial spaces.
Educational Qualification: Checking qualifications for educational programs or scholarships.
Credit or Insurance: Assessing credit risk or determining eligibility for issuing credit or insurance.
Business Transactions with Individuals: Reviewing personal customer accounts to determine ongoing eligibility.
Using Traffic2Leads for these purposes contravenes both our Terms & Conditions and the law, and may lead to legal consequences.
We take this seriously and may terminate accounts or report misuse to law enforcement as necessary.
NOTE: Remember, this is just a general guide. Stay updated and consult legal experts for compliance.
Traffic2Leads has a sophisticated yet user-friendly system for identifying visitors on your website in real time.
This is achieved by placing a small piece of code, known as a pixel, on your site.
The pixel works quietly in the background, collecting valuable insights about your visitors.The process begins with the use of deterministic data providers, which involve cookie-based methods.
These cookies help in recognizing repeat visitors based on their previous interactions.
In addition to this, we incorporate probabilistic data providers that use technologies like IP addresses and digital fingerprinting to make educated guesses about first-time visitors.
By combining these approaches, Traffic2Leads is able to convert the information gathered from anonymous site visits into actionable leads.
This system ensures that you receive detailed and reliable data about who is showing interest in your services or products, is cookie-proof, and can help you make more informed business decisions about who to reach out to.
Yes, in the United States, the CAN-SPAM Act does permit sending emails to any user, even if they haven't specifically opted in to receive them from you. However, there are important rules that need to be followed to ensure this is done correctly.
One key requirement is including a clear way for the recipient to opt-out or unsubscribe from future emails.
This ensures that while businesses can reach out to potential customers, the recipients have control over their inbox and can choose not to receive further communications if they wish.
As always, we recommend consulting with an attorney or privacy expert to answer specific questions about your business.
Since our service operates exclusively in the US, international privacy laws like the GDPR (from the European Union) and Canada's CASL don't apply to us.
However, it's worth noting that in the US, various states are starting to introduce their own privacy laws.
A good example is California’s California Consumer Privacy Act (CCPA) (see above).
Up to this point, these laws mainly focus on two things: making sure users know about data collection and use, and giving them the power to opt out or request deletion of their data.
We recommend seeking your own legal advice on how to best handle data including lead data and Personally Identifiable Information (PII). Consulting an expert will ensure you clearly explain how third-party data collection services are used, when and how to contact the information you receive from services like ours, and the scope of compliance necessary for your unique business use cases.
We've proactively prepared for this possibility.
Our approach includes partnering with highly reputable probabilistic match providers which is designed to ensure we continue to deliver quality data collection and maintain comprehensive coverage, even if third-party cookies are phased out in Chrome or other platforms.
Our goal is to stay ahead of these changes, keeping our service effective and reliable for you.
The data we gather can be used to reach out to identified website visitors through various marketing channels.
This includes display advertising, social media, direct mail, and email campaigns.
You have the flexibility to use this data with your own marketing platform, or you can take advantage of our integrated cross-channel remarketing platform.
This approach offers a versatile way to connect with your audience, ensuring that you can engage with them effectively across different mediums.
As always, we recommend consulting with a Privacy Expert or Attorney to ensure you remain compliant in these efforts.
Currently, Traffic2Leads exclusively services customers and their visitors in the United States.
No.
Under no circumstances will our team share data associated with your web visitors with any other customer, partner, or subsidiary.
Our team may access your web visitor data for relevant use cases such as customer support, data compliance inquiries, audits, quality control samples, etc.
We've got data for your CRM.