Skip to main content
Legal
/
CCPA Notice

CCPA Notice

Notices

March 26, 2024

How are we processing your data?

Effective Date: March 26, 2024.

These Additional California Privacy Disclosures (the “CA Disclosures”) supplement the information contained in our Privacy Policy and apply solely to individual residents of the State of California (“consumers” or “you”).

We strongly encourage you to read in full our Privacy Policy in addition to these CA Disclosures. If these CA Disclosures and any provision in the rest of our Privacy Policy conflict, then these CA Disclosures control for the processing of personal information of California consumers, otherwise the Privacy Policy shall control.

If you interact with the Site (as defined below) as a respondent to a survey/form/application/questionnaire sent to you by a person or entity (the “Creator”), the Creator controls all of your response data, and we recommend you contact them about their practices under the CCPA and similar privacy laws. We will process your response data only on the Creator’s behalf, and, accordingly, the Creator, and not us, is responsible for responding to your request related to data privacy.

These CA Disclosures provide additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 and its subsequent developments such as the CPRA (“CCPA”). Unless otherwise expressly stated, all terms in these CA Disclosures have the same meaning as defined in our Privacy Policy or as otherwise defined in the CCPA.

Personal Information Disclosures

When we use the term “personal information” in these CA Disclosures, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

For the purposes of these CA Disclosures, personal information does not include:

  • Publicly available information from government records.
  • Deidentified, aggregated or anonymized data (not capable of being associated with or linked to you).
  • Information relating to our job applicants, employees, contractors and other personnel of Typeform, which is not governed by these CA Disclosures.
  • Certain information that we process solely on behalf of our business customers as a “service provider,” which includes information relating to respondents that fill out typeforms sent to them by our customers – please refer to CCPA Notice - Typeform as a Service Provider section here.
  • Information excluded from the CCPA's scope, such as: (i) Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; (ii) Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

Collection and Use of Personal Information

We collect various categories of personal information in connection with our websites located at www.typeform.com and www.videoask.com (together with any sub-domains thereto, collectively, the “Site”), our services accessible through the Site. This includes types of Personal Data that may be considered “sensitive” under the CCPA. Please review our Privacy Policy to learn more about the personal information we collect.

In the last 12 months we have collected the following categories of personal information, which will be retained for as long as it is necessary to perform our contractual obligations:

  • Identifiers, such as name, address, email address, account information or other similar identifiers. These are collected directly from you, our business partners and affiliates, your browser or device and third parties you direct to share information with us.
  • California Customer Records (Cal. Civ. Code § 1798.80(e)), such as financial information. These are collected directly from you, our business partners and affiliates and third parties you direct to share information with us.
  • Commercial Information, such as information about products or services purchased or considered and your use of our services. These are collected directly from you, and third parties you direct to share information with us.
  • Internet/Network Information, such as log data and analytics data (including your usage and activity on our website). These are collected from your browser or device.
  • Geolocation Data, such as your general geographic location based on the log data. These are collected from your browser or device.
  • Sensory Information, such as audio recordings (i.e. if you use VideoAsk) of phone calls you have with us or photographs and video footage you choose to provide or we otherwise record as permitted by law. These are collected directly from you.
  • Professional/Employment Information, such as current occupation, job title, company/employer, industry and employment history. These are collected directly from you and third parties you direct to share information with us.
  • Other Personal Information, such as messages or requests you provide to us directly or through a third-party service, such as social media. These are collected directly from you, our business partners and affiliates, and third parties you direct to share information with us.
  • Inferences, including information generated from your use of our websites reflecting your preferences. These are collected from your browser device, and form information generated or derived from the personal information described above.

The categories of sources of personal information, include but are not limited to:
Directly and indirectly from activity on our Services: For example, from submissions through the Site, the Services, or website usage details collected automatically from measurement tools.
Directly from you: For example, from contact us forms you complete, requesting a demo, account registration, etc.
From third-parties. For example, from vendors who assist us in performing services for consumers, advertising networks, internet service providers, data analytics providers, and social networks, as further explained in the Privacy Policy and Cookie Policy.

The business purpose for the information collected as above is as follows:
(i) To provide you with and manage access to our products and services, audit the transactions in our platform and manage the relationship with our users;
(ii) To communicate with you, including via email, push notification and/or social media;
(iii) To operate, evaluate, secure and improve our business;
(iv) To enhance our products and services;
(v) To recognize you and remember your information when you return to our website and services;
(vi) To develop and carry out marketing campaigns and activities;
(vii) For debugging existing intended functionality;
(viii) For testing, training, research, analysis and product development, including to develop and improve our products and services;
(ix) To detect and protect against security events;
(x) To defend, protect or enforce our rights or applicable terms of service;
(xi) To comply with legal process and our legal obligations; and
(xii) As otherwise provided in our agreements with you.
(xiii) As otherwise detailed in the Privacy Policy.

Disclosure of Personal Information

In the last 12 months, we have not sold personal information about you, but we have disclosed all of the categories of personal information we collect, explained in the table above, to our affiliate and to third parties for a business purpose. Please refer to our Privacy Policy for further detail.

Note about “Sales”: We do not “sell” personal information as most people would typically understand that term. However, we do allow certain third-party partners and providers to collect information about consumers directly through our services for purposes of analyzing and optimizing our services and ads, providing content and ads that are more relevant, measuring statistics and the success of ad campaigns, and detecting and reporting fraud. To the extent this practice is interpreted to constitute a “sale” under the CCPA, please see our Cookie Policy for more information including how you may be able to exercise your rights to opt-out of cookies, analytics and personalized advertising.

Recipients of Personal Information

As described in our Privacy Policy, we share personal information with our affiliate and with a variety of third parties for business purposes. Please refer to our Privacy Policy for further information.

We may process Sensitive Personal Information in accordance with applicable laws but do not use or disclose sensitive personal information in any way that would require us to provide an opt-out opportunity under California law.

Your California Privacy Rights

As a California resident, you may be able to exercise the following rights in relation to the Personal Information about you that we have collected (subject to certain limitations at law):

The Right to Know

Most of your personal information is accessible directly from your Typeform account. This includes information about subscription and personal information, such as your email address. Additionally, you have the right to request any or all of the following information relating to the personal information we have collected about you or disclosed in the last 12 months, upon verification of your identity:

  • The categories of personal information we have collected about you;
  • The specific pieces of personal information we have collected about you;
  • The categories of sources from which we collected your personal information;
  • The purposes for which we use your personal information;
  • The categories of third parties with whom we share your personal information; and
  • The categories of information that we sell or disclose to third parties.

The Right to Request Deletion

You have the right to request us to delete your personal information that we have collected from you and to tell our service provider to do the same, subject to certain legally permitted exceptions.

The Right to Opt Out of Personal Sales or Sharing

You have the right to direct us not to sell personal information we have collected about you to third parties now or in the future.

If you are under the age of 16, you have the right to opt in, or to have a parent or guardian opt in on your behalf, to such sales.

The Right to Correct Inaccurate Information

You have the right to ask us to correct any information we may have from you that is not accurate or reflects wrong information about you.

The right to limit the use and disclosure of sensitive personal information

You may request us to use your sensitive personal information only for providing you with Services.

The right to opt-out of automated decision-making technology

We do not use this kind of technology, but if we ever do you will have the right to avoid us from taking decisions using automated means.

However, please note that if the exercise of the rights described above limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products or services or engage with you in the same manner.

Non-Discrimination

We do not discriminate against any individual for exercising their rights under these CA Disclosures

How to Exercise Your California Privacy Rights

To Exercise Your Right to Know or Right to Deletion

To exercise your right to know and/or right to deletion, please submit a request by: (i) our Contact Form indicating the title “California Rights Request”; or (ii) filling out our California Resident Rights Request Form .

We will need to verify your identity before processing your request. In order to verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with a request to exercise the right to know and/or the right to deletion to that personal, certain requests may require us to obtain additional personal information from you, which we will only use for this verification purpose. In certain circumstances, we may decline a request to exercise the right to know and/or right to deletion, particularly where we are unable to verify your identity.

To Exercise Your Right to Opt Out of Personal Information Sales

As noted above, we do not “sell” personal information as most people would typically understand that term. However, we do allow certain third-party partners and providers to collect information about consumers directly through our services for purposes of analyzing and optimizing our services and ads, providing content and ads that are more relevant, measuring statistics and the success of ad campaigns, and detecting and reporting fraud. To the extent this practice is interpreted to constitute a “sale” under the CCPA, please see our Cookie Policy for more information including how you may be able to exercise your rights to opt-out of cookies, analytics and personalized advertising.

Updates to These CA Disclosures

We will update these CA Disclosures from time to time. When we make changes to these CA Disclosures, we will change the "Last Updated" date at the beginning of these CA Disclosures. If we make material changes to these CA Disclosures, we will notify you by email to your registered email address, by prominent posting on the Site, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.

Contact Us

If you have any questions or requests in connection with this Notice or other privacy-related matters, please submit a request via our Contact Form.

Typeform as a Service Provider

Effective Date: March 14, 2024.

This notice confirms that we will act as a Service Provider as such term is defined in the California Consumer Privacy Act, Cal. Civ. Code §§ 1798.100 et seq. and implementing regulations including the CPRA (the “CCPA”). We will collect, access, maintain, use, process and transfer personal information, as that term is defined by the CCPA (“CCPA Personal Information”) solely for the purpose of performing our obligations under the Service Terms and Conditions and as further described in our Privacy Policy, on your behalf and for no commercial purpose other than the performance of such obligations.

We shall not sell, share, retain, disclose, release, transfer, combine your information with third-party information, make available or otherwise communicate any CCPA Personal Information to any third party without your prior written consent or as required to perform our contractual relationship. Notwithstanding the foregoing, nothing shall restrict our ability to disclose CCPA Personal Information (i) to a Subcontractor for a business purpose pursuant to a written agreement to protect CCPA Personal Information in the same manner as provided herein and in the Privacy Policy, (ii) to a third party as necessary to comply with applicable laws, or (iii) as otherwise permitted by the CCPA.

We will delete and permanently destroy CCPA Personal Information (i) upon your written request by you, and (ii) upon termination of this Agreement. We shall at all times remain responsible for compliance with its obligations to protect CCPA Personal Information in accordance with this notice and our Privacy Policy and will be liable to you for the acts or omissions of any subcontractor or other third party to whom we have disclosed or permitted to access CCPA Personal Information as if they were our acts or omissions.