CCPA

DRYFT1 California Privacy Notice

Hey there, California residents! This section is crafted just for you. The California Consumer Privacy Act (CCPA) gives you some neat rights regarding your personal information, or “PI” as we like to call it. We’re here to explain how we collect, use, and share your PI, all in line with the CCPA.

How We Handle Your Personal Information
In simple terms, we gather, hold onto, use, and share your PI to deliver the services you love from Dryft Board, LLC doing business as DRYFT1 (“DRYFT1 Services”). We also do this to keep our business running smoothly. Plus, if the law says so or if you give us the thumbs up, we’ll handle your PI as needed.

What We Collect and Share
Over the past 12 months, we might have collected and shared these types of personal info with others:

  • Identifiers: This includes your name, contact details, user ID, and more.
  • Shared With: Our trusty service providers like cloud vendors, analytics companies,
  • social media networks, and advertisers.
  • Personal Records: Such as your financial account info.
  • Shared With: Cloud vendors and financial service folks.
  • Personal Traits: Things like your age and gender.
  • Shared With: Again, service providers like cloud vendors, analytics teams, and ad
  • companies.
  • Account Details/Commercial Info: What you’ve purchased or your service history.
  • Shared With: Analytics companies, ad providers, cloud vendors, and more.
  • Internet Usage Info: Your browsing history, search history, and app interactions.
  • Shared With: Cloud providers, analytics, advertisers, and social networks.
  • Geolocation Data: Where you are based on your IP address.
  • Shared With: Analytics companies, advertisers, and social networks.
  • Sensory Data: Like recordings from call centers.
  • Shared With: Customer service providers.
  • Performance Data: How you use our vehicles and products.
  • Inferences from PI: Profiles based on your characteristics and behaviors.
  • Shared With: Analytics firms, ad providers, and social networks.

Besides sharing with the above, we might also share your PI with DRYFT1 affiliates or at your request, to help us provide you with the best goods and services. If the law requires it, we could share info like identifiers or internet usage with government entities, including law enforcement.

How We Collect Your Info
We gather your PI directly from you, through your devices, from service providers aiding our operations, public databases, social media, and data providers. We use this info for:

  • Delivering our services and products, maintaining your account, processing payments,
  • and more.
  • Keeping things secure and protecting against bad guys.
  • Fixing bugs and improving our services.
  • Conducting research and development.
  • Ensuring quality and safety, and enhancing our products.

We might share your PI for other purposes required by law, like with our service vendors, government, or as part of a merger or asset sale. Rest assured, we’re committed to handling your personal information responsibly. We have security measures in place to protect against unauthorized access and we will never sell your PI for any reason.

Your Privacy Rights
As a valued user of DRYFT1, you have certain rights to exercise control over your personal information. You can access, correct, or delete your PI at any time by updating your profile or contacting us directly. You also have the right to object to or restrict our use of your PI, and in some cases, request that we transfer it. For more detailed information on your privacy rights and
how to exercise them, please refer to our Privacy Policy. We will always do our best to honor your privacy preferences and keep you informed of any changes in our data practices.

Your CCPA Rights
Right to Opt-Out of Sale of Personal Information

Hey there! We want to make it clear that we don’t knowingly sell your personal information (PI). Because of this, we don’t provide a mechanism for you to submit a “Do Not Sell” request. There’s still some debate in the industry about whether third-party cookies and tracking devices on our websites and mobile apps count as a “sale” of your PI, so we currently don’t treat them as
such.

However, we should mention that third parties might collect personal information through DRYFT1 Services for purposes like advertising and analytics. If you’re interested, you can visit Privacy Rights Info to opt out of what these third parties may consider a sale of PI. Keep in mind
this is a third-party program, and while we think it’s useful, we can’t vouch for its effectiveness. To make sure your “Do Not Sell” choices are honored, you’ll need to opt out on each device and browser you use. Also, opting out doesn’t mean you won’t see any ads; you may still see interest-based ads. For more info on interest-based ads and additional opt-out options, check out
Your Ad Choices or NAI Consumer Opt-Out.

You’ve got control over browser-based cookies too! Just adjust your browser settings.

Some browsers might allow you to turn on or off a “Do Not Track” signal. But since there’s no set standard on what these signals mean, we don’t currently respond to them. For additional information on tracking and targeting, please see our online Privacy Policy.

And just so you know, we might disclose your PI for certain purposes that aren’t considered a sale:

  • If you direct us to disclose PI
  • To comply with your requests under the CCPA
  • Disclosures among DRYFT1 entities, or as part of a merger or asset sale
  • Any other reasons required or allowed by applicable law

California Minors
Another quick note—we don't knowingly sell the PI of consumers under 16 years old. If you’re a California resident under 18 and have posted content on any website, social media platform, forum, and or any other available medium of DRYFT1 Services, you’re welcome to request its removal. Just contact us at support@dryftboard.com, tell us where the content is posted, and
confirm you posted it. We’ll do our best to remove the post or anonymize it to the extent required by law. However, complete removal isn’t guaranteed because third parties may have republished it.

Rights to Know and Delete Personal Information

Residents of California have certain privacy rights under the CCPA, including the right to have an authorized agent act on their behalf. Any request you send us will go through an identity and residency verification process, also known as a “Verifiable Consumer Request.” Without enough information to verify your identity, we won’t be able to fulfill your CCPA requests.

If you can’t provide specific info about yourself and your interactions with DRYFT1, we may not be able to verify your identity to fulfill your request to know or delete personal information. Sometimes, we might verify your identity by confirming you’re the owner of the email address on file. When it comes to specific pieces of information, we’ll apply heightened verification
standards and might request additional info from you.

Some types of PI we hold aren’t associated closely enough with a Consumer to verify it as that person’s PI (like clickstream data tied to a pseudonymous browser ID). By CCPA requirements, we don’t include such information in response to Verifiable Consumer Requests. If we can't comply with a request, we’ll explain why in our response.

We aim to make reasonable efforts to identify Consumer PI and respond to your California Consumer rights requests. Typically, there’s no fee for fully responding to your requests, but if your request is excessive, repetitive, unfounded, or overly burdensome, we might charge a reasonable fee or refuse to act upon it.

Feel free to use an authorized agent to submit a Consumer rights request. In that case, we may require proof that the agent is authorized to do so and take other steps allowed by the CCPA to ensure it’s a proper request.

a. Categories of PI
You have the right to send us a request (no more than twice in 12 months) for:

  • Categories of PI we’ve collected about you
  • Sources from which we collected your PI
  • Business or commercial purposes for collecting or selling your PI
  • Third parties to whom we disclosed your PI
  • Categories of PI disclosed for a Business Purpose in the prior 12 months or that none
  • occurred
  • Categories of PI sold about you in the prior 12 months or that no Sale occurred. If your PI was sold, we would explain the categories of your PI we sold and the categories of third parties to which we sold PI, by categories of PI sold for each third party.


b. Specific Pieces of PI
Twice a year, you can request a transportable copy of your PI that we collected and maintained in the 12 months before the request date. Note, we might not be able to fully respond to requests going back 12 months, as we retain PI for varying time periods.


c. The Right to Deletion
You can ask us to delete your PI that we collected directly from you and maintain. Some exceptions apply, like regulatory reasons or fulfilling a contract with you, or other internal uses compatible with the original context in which you provided it. Remember, we aren’t required to delete PI we didn’t collect directly from you. Upon receiving a verified request to delete your PI, we will do so unless otherwise authorized or required by law.

Exercising Your Rights
To exercise your right to know or delete, submit a request:

  • Online: https://dryftboard.com/pages/ccpa
  • Email: dataprivacy@dryftboard.com
  • Phone: +1 (757) 448-3607

Include your name, address, email, and phone number in your request. You’ll need to respond to follow-up inquiries. If you don’t, we may deny your request. We won’t discriminate against you for exercising your rights as described below.

Notice of Financial Incentive and Non-Discrimination
We won’t discriminate against you in any CCPA-prohibited way because you exercise your rights. However, we might charge different prices, rates, or offer different levels or quality of goods/services based on the value of your PI. We might also offer financial incentives for the collection, sale, retention, and use of your PI as allowed by the CCPA. This could lead to different prices, rates, or quality levels. Any financial incentive will be explained in its program
terms. Participation in incentive programs is optional. You’ll need to opt-in and can opt-out anytime by following the program’s instructions. We may change incentive programs and terms by posting updates, so check them regularly.

No matter what, we may collect, use, and disclose your PI as required or permitted by law, and this might override your CCPA rights. We also aren’t required to honor requests that would infringe on our or others’ rights or conflict with applicable law. Keep in mind that if we delete your PI, you may lose access to our products and services. However, we’ll retain a record of your
request as required by law.

California Shine the Light Law - A Friendly Explanation

Hey there, California residents! If you’re curious about how we share your personal information with third parties for their direct marketing purposes, we’ve got you covered. Under the California “Shine the Light” law, you have the right to ask us for this info.

How to Make a Request
If you’re interested in learning more, just drop us an email at dataprivacy@dryftboard.com or send a letter to our address below. Make sure to include “California Shine the Light Privacy
Rights Request” in the first line. Don’t forget to add your name, street address, city, state, and ZIP code.

Address:
1819 Riverview Dr. Suite 206,
Melbourne FL 32901
United States

Good to Know

  • We can only respond to one request per customer each year.
  • Make sure you contact us through the specified email or mail address—other methods won’t work.

Also, remember that these rights are separate from your CCPA rights, so you’ll need to handle each set of rights individually under their respective laws.

Feel free to reach out—we’re here to help! 

Authorized Agents
You may designate an authorized agent to make requests on your behalf. You must provide an authorized agent written permission to submit a request on your behalf, and we may require that you verify your identity directly with us. Alternatively, an authorized agent that has been provided power of attorney pursuant to Probate Code sections 4000-4465 may submit a request on your behalf.