SUPPLEMENTAL CCPA PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

This Supplemental CCPA Privacy Notice for California Residents (the “CCPA Notice”) applies solely to visitors and users residing in the State of California (“Consumers”). It supplements the Buck Company, LLC (“Buck”) Privacy Policy and is provided to comply with the California Consumer Privacy Act of 2018 (“CCPA”).

The CCPA includes temporary exemptions regarding certain personal information collected in a business-to-business context (“B2B”). This CCPA Notice is not intended to and does not cover exempted or excluded information, and also does not apply to employment-related personal information collected from California-based employees, job applicants, contractors, or similar individuals.

Information We Collect

Buck may have collected personal information from California Consumers within the last twelve (12) months in the following categories:

Professional or employment-related information.Current or past job history or performance evaluations.

Category Examples
Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Commercial information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Biometric information. Genetic, physiological, behavioral, and biological characteristics or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
Internet or other similar network activity. Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.
Geolocation data. Physical location or movements.
Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information.
Professional or employment-related information. Current or past job history or performance evaluations.
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
Inferences drawn from other personal information. Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sources of Personal Information and Purposes of Use

We may obtain personal information in the categories listed above directly from you (for example, from forms you complete or products and services you purchase) or indirectly (for example, from observing your actions on our website). We wish to receive only personal information which relates to you in your business capacity. Buck does not wish to receive your private (non-business) contact or other personal information.

Personal information is used for our business purposes, such as to operate our business, for supplying and communicating with you about our products and services, to improve our website, to contact and interact with you (e.g., via email and messaging services), to verify your identity, to personalize your experience using the website, to maintain the safety, security, and integrity of our website and business, to protect from harm, to respond to your requests or otherwise fulfill or meet the reason for which you provided the information, for recordkeeping/accounting and as otherwise required by law, and for other purposes we describe when you provide the information.

Buck does not wish to receive and does not knowingly collect information about minors under 16 years old.

Sharing of Personal Information

Buck does not sell or rent your personal information to third parties for consideration. Buck believes that it does not “sell” personal information as the term is defined in the CCPA.

We do disclose or share personal information for our business purposes, such as with our affiliated companies within The Dixon Group, and with certain third parties (e.g., to supply our products and services, and to process, support and fulfill your orders, and for the other purposes described above). This may include sharing with categories of third parties such as our contractors, service providers, suppliers, distributors and other third parties we use to conduct our business and related infrastructure (e.g., payment service providers, third-party services we use to verify and correct postal address and other shipping information, and contact management systems).

We also may make certain disclosures as required to comply with legal requirements or to prevent harm.

Buck does not sell personal information of minors under 16 years of age.

Your Rights Under the CCPA

The CCPA provides California Consumers with specific rights and provides temporary exemptions for certain information collected in a business-to-business context (“B2B”).

Right of Access and Portability of Data: The CCPA allows you to request certain information about the collection and use of your personal information over the past 12 months. However, because the personal information we collect is B2B personal information, we do not make access and portability rights available for such B2B personal information.

Deletion Rights: The CCPA allows you to request the deletion of personal information collected and retained, subject to certain exceptions provided in the CCPA. However, because the personal information we collect is B2B personal information, we do not make deletion rights available for such B2B personal information.

Opt-Out of Sales: California Consumers have the right to opt-out of the sale of their personal information.

Non-Discrimination: We will not discriminate against you for exercising rights under the CCPA, but your exercise of rights may affect the level and types of offers, services, and products we may offer or provide to you.

To exercise the rights described above, please submit a verifiable consumer request to us by either calling us at 833.976.1849 or emailing us at compliance@buckcompany.com.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period, and any disclosures we provide will only cover the 12-month period preceding the verifiable consumer’s request. We will do our best to respond to verifiable requests in a timely manner as required by law. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information.

Changes to this CCPA Notice

We reserve the right to amend this notice at our discretion and at any time. We note that the implementing regulations for the CCPA have not yet been finalized by the Attorney General of California and that we may update our policy and/or practices based on such final regulations or based on additional guidance when they are available. When we make changes to this notice, we will post the updated notice on the Buck website and update the notice’s date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

Last Updated: October 13, 2020