California Privacy Policy

Effective Date: 2022-09-09

This California Privacy Policy (“Privacy Policy”) is provided by OwnIt Holdings, Inc. (“duckscore” “we” “us” “our”) and supplements duckscore’s Privacy Policy (“duckscore Privacy Policy”) and any other relevant privacy policies of affiliated duckscore entities. It applies solely to users, customers, and visitors who reside in California (“consumers” or “you”) who may visit or use duckscore’s services, website, or mobile application (collectively “Site”). 

This Privacy Policy explains how we collect, use, and disclose personal information about consumers. It also explains certain rights afforded to consumers under California’s Shine the Light law and the California Consumer Privacy Act of 2018 (“CCPA”) and any subsequent amendments or acts. This Privacy Policy uses certain terms that have the meaning given to them in the CCPA including personal information. “Personal Information,” for purposes of this Privacy Policy regarding the rights of California residents, means identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household and does not include de-identified or aggregate information or publicly available information.

The following Privacy Policy does not apply to individuals who do not live in California on a permanent basis, individuals we do not collect personal data about, or individuals for whom all of the information we collect is exempt from California laws. Furthermore, This Privacy Policy does not apply to information collected, processed, or disclosed pursuant to the Gramm-Leach-Bliley Act and its implementing regulations or the California Financial Information Privacy Act.

1. Categories of Personal Information Collected

We may collect (and may have collected during the 12-month period prior to the effective date of this Privacy Policy) the following categories of Personal Information about you:

  • Identifiers: real name, mailing address, phone number, date of birth, social security number, registration information (username and password), third-party financial account information (ID and password), internet protocol (IP) address, cookies, beacons, and mobile ad identifiers
  • Additional Information Subject to Cal. Civ. Code § 1798.80: real name, mailing address, phone number, social security number, employment information, and financial information
  • Protected Classifications: characteristics of protected classifications under California or federal law, such as sex, gender, and age
  • Internet or Other Electronic Network Activity: browsing history, search history, information regarding a consumer’s interaction with websites, applications or advertisements, cookies, beacons, mobile ad identifiers, clickstream, time or date electronic communicated was created, sent, or received, and any information pertaining to any consumer or device participating in electronic communication
  • Geolocation: IP address
  • Employment Information: payroll information, employment status, benefits, and 401K or similar programs
  • Sensitive Personal Information: social security number and account login or financial account in combination with any required security or access code, password, or credentials allowing access to an account

2. Purpose of Collecting Personal Information

We may use (and may have used during the 12-month period prior to the effective date of this Privacy Policy) your Personal Information for the purposes described in duckscore’s Privacy Policy and for the following business or commercial purposes specified in the CCPA:

  • Perform services you request 
  • Enable non-affiliated third parties to provide additional services to you
  • Operate, maintain, and improve our services
  • Create new features and functionality
  • Analyze usage trends and preferences of users across different devices
  • Detect security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
  • Provide customer service and support
  • Send promotional materials, offers, and messages related to our services and the activities of third parties we work with
  • Personalize consumer’s experience and provide customized advertisements, content, and information across devices
  • Monitor aggregate Site usage metrics
  • Monitor and analyze the effectiveness of services and third-party marketing activities
  • Track your entries, submissions, and status in any promotions or other activities
  • Provide access to your credit score and period updates to your score

3. Sources of Personal Information

During the 12-month period prior to the effective date of this Privacy Policy, we may have obtained Personal Information about you from the following categories of sources:

  • Directly from you
  • Automatically from your devices, such as when you visit our websites, online and mobile applications
  • Other individuals, such as authorized agents or family members
  • Our affiliates, business partners, referral partners, or advertisers 
  • Vendors who provide services on our behalf
  • Government entities and other publicly-available sources
  • Consumer reporting agencies

4. Sale of Personal Information

We do not sell your Personal Information in exchange for monetary consideration and have not done so during the preceding 12 months. 

5. Sharing of Personal Information

During the 12-month period prior to the effective date of this Privacy Policy, we may have shared or disclosed the following categories of Personal Information about you for a business or commercial purpose with certain categories of third parties, as described below: 

Categories of Personal Information Sold, Shared, or Disclosed Categories of Third Parties to whom Personal Information was Sold, Shared, or Disclosed Business or Commercial Purpose of Selling, Sharing, or Disclosing Personal Information
Identifiers
  • Service Providers
  • Lending Providers
  • Experts, advocates, and advisors
  • Business Partners
  • Verify consumer’s identity
  • Provide access to credit report, score, or information 
  • Provide access to third-party banking, credit card, retirement or investment products
  • Rectify any complaints about a product or feature
  • Support our internal and business operations
  • Fulfill a consumer’s request
Additional Information Subject to Cal. Civ. Code § 1798.80
  • Service Providers
  • Lending Providers
  • Experts, Advocates, and Advisors
  • Business Partners
  • Verify consumer’s identity
  • Provide access to credit report, score, or information 
  • Provide access to third-party banking, credit card, retirement or investment products
  • Rectify any complaints about a product or feature
  • Support our internal and business operations
  • Fulfill a consumer’s request
Internet or Other Electronic Information Activity
  • Lending Partners
  • Enable consumer to request information or apply for financial products on a third-party lender site 
Employment Information
  • Service Providers
  • Business Partners
  • Support our internal and business operations
Sensitive Personal Information
  • Service Providers
  • Lending Providers
  • Verify consumer’s identity
  • Provide access to credit report, score, or information 
  • Support our internal and business operations

In addition to the categories of third parties identified above, during the 12-month period prior to the effective date of this Privacy Policy, we may have shared Personal Information about you with government entities, self-regulatory organizations and third parties that may assume or have assumed control of part of our business as part of a merger or acquisition.

6. Sensitive Personal Information

We may collect sensitive personally identifiable information such as individuals' Social Security Numbers and financial account information in order to provide certain product and service offerings. We will only collect this kind of information if it is necessary and only when provided or authorized by you. We will only use it for the limited, permissible purpose for which it is collected and we will take commercially reasonable steps to adequately secure the information. We may also provide this sensitive information with trusted third parties for the limited, specific permissible purpose for which it was shared.

7. Do Not Track

Many web browsers and devices include a Do-Not-Track (“DNT”) feature or setting that signals your preference not to have data about your online browsing activities monitored and collected. However, there is currently no uniform standard for recognizing and implementing the DNT signals.  As such, duckscore does not monitor or respond to DNT requests.  If a standard is adopted that we must follow in the future, then we will inform you about that practice in a revised version of this Privacy Policy.

8. California Consumer Privacy Rights

Under CCPA, consumers have certain rights regarding their Personal Information, as described below.

  • Right of Access: You have the right to request, twice in a 12-month period, that we disclose to you the following information about you, limited to the preceding twelve (12) months:
    • The categories of Personal Information that we collected about you;
    • The categories of sources from which the Personal Information is collected;
    • The business or commercial purpose for collecting or selling Personal Information;
    • The categories of third parties with whom we share Personal Information;
    • The specific pieces of Personal Information that we have collected about you;
    • The categories of Personal Information that we disclosed about you for a business purpose or sold to third-parties; and
    • For each category of Personal Information identified, the categories of third parties to whom the information was disclosed or sold.
  • Right of Deletion: You have the right to request that we delete any Personal Information about you which we have collected from you, subject to exceptions within the law. 
  • Right to Opt-Out: You have the right to opt-out of the disclosure of Personal Information about you for monetary or other valuable consideration.  However, we do not sell any Personal Information. 
  • Right to Opt-In: We do not have actual knowledge that we collect, share, or sell the Personal Information of minors under the age of 16.
  • Right to Limit Use and Disclosure of Sensitive Personal Information: You may request specific limitations on further sharing, use, or disclosure of your Sensitive Personal Information that is collected or processed for “the purpose of inferring characteristics about a consumer.”  However, we do not collect or process Sensitive Data for this purpose.
  • Right to Correction: You have the right to request that we maintain accurate Personal Information about you and correct any Personal Information about you which we have collected from you, subject to exceptions within the law. 

If you would like to exercise your rights, please refer to the below Section “Consumer Requests.” 

  • Right to Non-Discrimination: We may not discriminate against you because you exercise any of your rights under the CCPA, including, but not limited to:
    • Denying goods or services to you;
    • Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
    • Providing a different level or quality of goods or services to you; or
    • Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

9. Consumer Requests.

You may request to exercise your data access, deletion, or correction rights by contacting us as described in the Contact Us section below.

Verifying Requests. To help protect your privacy and maintain security, we will take steps to verify your identity before processing your request.  If you request access to or deletion of your Personal Information, we may require you to provide any of the following information: name, date of birth, email address, telephone number, or postal address. When you make such a request, you can expect the following: 

  • As required under applicable law, we will verify your identity. You will need to provide us with your email address and full name.  We may ask for additional information if needed.
  • We will confirm that you want your information accessed, corrected, and/or deleted.
  • We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the webpage or phone number listed below.
  • We will respond to your request within 45 days upon receipt of your request. If necessary, we may need an additional period of time, up to another 45 days, but we will reply either way within the first 45-day period and, if we need an extension, we will explain why.
  • In certain cases, a request for access, correction, or deletion may be denied. For example, if we cannot verify your identity, the law requires that we maintain the information, or if we need the information for internal purposes such as providing Services or completing an order. If we deny your request, we will explain why we denied it and delete any other information that is not protected and subject to denial.

You may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with written permission, signed by you, to act on your behalf.  Your agent may contact us as described in the Contact Us section below to make a request on your behalf. Even if you choose to use an agent, we may, as permitted by law, require:

  • The authorized agent to provide proof that you provided signed permission to the authorized agent to submit the request;
  • You to verify your identity directly with us; or
  • You to directly confirm with us that you provided the authorized agent permission to submit the request.

10. Changes to this California Privacy Policy

We reserve the right to make changes to this Privacy Policy at any time. We will notify you about material changes in the way we treat your information, including by placing a prominent notice on the Site or by sending you an email so that you can choose whether to continue using the Services. Material modifications are effective 30 calendar days after our initial notification or upon your acceptance of the modified Terms. Immaterial modifications are effective upon posting of the updated Privacy Policy or Terms of Service on the Site. Please revisit this page periodically to stay aware of any changes to this Privacy Policy. For the avoidance of doubt, disputes arising hereunder will be resolved in accordance with the Privacy Policy in effect at the time the dispute arose.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or the information practices of our Services, please contact us at privacy@duckscore.com or by calling us toll-free at 1-800-958-5054‬.