Arrowhead Forensics Supplemental Privacy Policy California, Virginia, Colorado, Connecticut, Utah
Last Revised on: October 1, 2023
This Supplemental Privacy Policy (“Supplemental Policy”) applies only to information collected about consumers residing in California, Colorado, Virginia, Utah, or Connecticut (“consumer(s),” “Consumer(s),” “you,” “your”) and supplements the information contained in our Consumer Privacy Policy. It provides information required under the California Consumer Privacy Act of 2018 and as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), the Colorado Privacy Act of 2021 (the “CPA”), the Virginia Consumer Data Protection Act of 2021 (the “VCDPA”), the Utah Consumer Privacy Act of 2022 (the “UCPA”), and the Connecticut Data Privacy Act of 2022 (“CDPA”) and any and all regulations arising therefrom (collectively, “U.S. Privacy Laws”).
This Supplemental Policy describes the practices of Arrowhead Forensics (“Arrowhead,” “we,” “us,” or “our”) regarding the collection, use, and disclosure of personal information and provides instructions for submitting data subject requests. This Supplemental Policy is broader in scope than our Consumer Privacy Policy because our Consumer Privacy Policy applies only to information collected through our Site and other products or services that display or link to the Consumer Privacy Policy.
Some portions of this Supplemental Policy apply only to consumers of particular states, and we have indicated where those portions are state-specific. Please note that this Supplemental Privacy Policy does not apply to applicants, employees, or other individuals with whom we interact in an employment-related capacity (our “Workforce”). Members of our Workforce may access the California Workforce Privacy Policy by clicking here.
If you are unable to review or access this Supplemental Policy due to a disability, you may contact Arrowhead Forensics at customerservice@arrowheadforensics.com to access this Supplemental Policy in an alternative format.
Definitions Specific to this Policy
- “Consumer” means a natural person who resides in California, Colorado, Virginia, Utah or Connecticut and to whom we offer information, goods, or services. For purposes of this Supplemental Policy, this term includes natural persons who reside in California and engage with us as part of business-to-business transactions. Consumers do not include Workforce members.
- “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or household. Personal Information includes “personal data” as that term is defined in the U.S. Privacy Laws. Personal Information also includes “Sensitive Personal Information,” as defined below.
- “Sensitive Personal Information” includes Personal Information that reveals a Consumer’s: 1) Social security, driver’s license, state identification card, or passport number; 2) Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials allowing access to the individual’s account; 3) Precise geolocation; and 4) Genetic data. Sensitive Personal Information also includes “sensitive data” as that term is defined in the U.S. Privacy Laws.
- “Sell,” “Sale,” or “Sold” means renting, releasing, or transferring an individual’s Personal Information to a Third Party for money or other valuable consideration.
- “Share,” “Shared,” or “Sharing” means transferring an individual’s Personal Information to a Third Party for behavioral advertising purposes, whether or not for money or other valuable consideration.
- “Third Party” means a person or organization which is not a Consumer, Vendor, or an entity owned or controlled by us and as defined by U.S. Privacy Laws.
- “Vendor” means a “service provider,” “contractor,” or “processor” which collects, stores, or otherwise handles data for us, as those terms are defined in U.S. Privacy Laws.
These definitions apply, whether terms are capitalized or not. Other terms used in this Supplemental Policy may be defined under U.S. Privacy Laws and they shall have the meanings described in those statutes. If there are variations between such definitions in different laws, you will be covered by the definition that applies in your state. For example, if you are a Virginia consumer, terms defined in the VCDPA shall apply to you if they are used in this Supplemental Policy.
The Personal Information We Collect and Disclose
The chart below shows the categories of personal information we may collect; examples of personal information in each category; types of sources from which each category of personal information is collected; the business purposes for which each category of personal information is collected; and the types of Vendors or Third parties with whom that category of personal information is shared. As this chart shows, we may share personal information with Third Parties or disclose certain personal information to Vendors for business purposes.
|
Category of Personal Information |
Examples |
Sources from Which This Personal Information is Collected |
Business Purposes for Collection |
Types of Vendors or Third Parties with Whom This Personal Information is Shared, Sold or Disclosed |
|---|---|---|---|---|
|
Unique Identifiers
|
Real name, signature, address, unique personal identifier, online identifier, IP address, email address, account name |
-Directly from you via our website -Direct communication with you -Social media interaction with you -Marketing agencies |
-Provide you with goods and services -Managing your preferences -To help you finalize your purchases if your cart is abandoned -Customer service communications -Other Promotions
|
Disclosed: -Web site hosters -Event planners -Credit check firms Shared or Sold: -Business partners -Marketing providers -Analytic providers -Social media platforms |
|
Contact and Financial Information
|
Name, address, telephone, email, credit card number, debit card number, or any other financial information |
-Directly from you via our website -Claims management providers |
-Complete transactions -Other services and discounts -Process claims -Prevent fraud |
Disclosed: -Payment processors -Fraud Checking -Address Validation -Tax Calculation -Mailing houses -Lenders Shared or Sold: -None |
|
Commercial Information
|
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies |
-Directly from you via our website -Direct communication with you -Social media interaction with you -Marketing agencies |
-Provide you with goods and services -Invite participation in surveys and feedback -Customer service communications -Improve promotions |
Disclosed: -Web hosters -Payment processors -Marketing consultants -Contractors Shared or Sold: -Business partners -Marketing providers -Analytics providers -Social media platforms -Online influencers |
|
Internet or Other Electronic Activity
|
Browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement |
-Directly from you via our website -Direct communication with you -Social media interaction with you -Marketing agencies |
-Provide you with goods and services -Invite participation in surveys and feedback -Customer service communications -Improve promotions |
Disclosed: -Web hosters -Payment processors -Contractors - Fraud detection Shared or Sold: -Business partners -Marketing providers -Analytics providers -Social media platforms -Online influencers |
|
Geolocation Data
|
Device location |
-From your digital device -Direct communication with you -Social media interaction with you
|
-Provide you with goods and services -Customer service communications -Improve promotions |
Disclosed: -Service providers - Fraud Checking Shared or Sold: -Business partners -Marketing providers -Analytics providers -Social media platforms |
|
Audio, Electronic, Visual, Thermal, Olfactory, Or Similar Information
|
Call and video recordings |
-Direct communication with you
|
-Provide you with goods and services -Customer service communications
|
Disclosed: -Service providers Shared or Sold: -None |
|
Inferences Drawn from Other Categories to Create a Profile
|
Profile reflecting preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes |
-Directly from you via our website -Direct communication with you -Social media interaction with you -Marketing agencies |
-Provide you with goods and services -Customer service communications -Improve promotions
|
Disclosed: -Marketing consultants -Service providers Shared or Sold: -Business partners -Marketing providers -Analytics providers -Social media platforms |
Sensitive Personal Information We Collect and Disclose
|
Category of Sensitive Personal Information |
Sources From Which This Sensitive Personal Information is Collected |
Business Purposes for Collection |
Types of Vendors or Third Parties with Whom This Sensitive Personal Information is Shared, Sold or Disclosed |
|---|---|---|---|
|
Account log-in, financial account, debit card number, plus an access code
|
-Directly from you you via our website (your passwords are encrypted, we cannot login as you. Card information are encrypted and tokenized and cannot be read by us
|
-Complete transactions -Offer services and discounts -Prevent fraud |
Disclosed: -Web hosters -Payment processor -Service Providers Shared or Sold: -None |
|
Precise Geolocation
|
-From your digital device -Direct communication with you -Social media interaction with you
|
-Provide you with goods and services -Customer service communications -Improve promotions |
Disclosed: -Service providers Shared or Sold: -Business partners -Marketing providers -Analytics providers -Social media platforms |
Retention of Data
We intend to retain each category of personal information described above only for as long as necessary to fulfill the purpose for which it was collected, or a related and compatible purpose consistent with the average consumer’s expectation, and to comply with applicable laws and regulations. We consider the following criteria when determining how long to retain personal information: why we collected the personal information; the nature of the personal information; the sensitivity of the personal information; our legal obligations related to the personal information, and risks associated with retaining the personal information.
Your Rights to Your Personal Information
Consumers who reside in states with U.S. Privacy Laws have certain rights with respect to the collection and use of their personal information. Those rights vary by state. For compliance with California’s and Colorado’s requirements, we provide detailed information below regarding the Consumer rights available to California and Colorado consumers. Consumers who reside in other states with U.S. Privacy Laws have similar rights and can find more details by referencing the U.S. Privacy Law applicable to them.
Instructions to Exercise your Rights. If you would like to exercise any of the rights listed below, please click here or call us at 800-953-3274. The link will take you to an interactive webform that you can complete and submit to make a request for information that we will then verify. If you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request, and the level of verification will depend on the request being submitted. You may also submit a request by emailing us at customerservice@arrowheadforensics.com.
You may designate an authorized agent to exercise your rights under U.S. Privacy Laws on your behalf. Such individual must have power of attorney, or be an authorized agent registered with the relevant Secretary of State.
In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
Right to Appeal You have the right to appeal our decisions about your consumer requests. If you choose to appeal, your request will move from our company to our legal department for review. If you would like to appeal a decision regarding your data request, please click here, emails us at customerservice@arrowheadforensics.com, or call 800-953-3274. Please state that your request is an “Appeal,” and describe the date and nature of your original request.
Verification Process
When you submit a request to exercise your data subject rights, we may ask you to provide information that will enable us to verify your identity.
If you designate an authorized agent to exercise your rights on your behalf, we may require that you or the authorized agent do the following:
- Verify your identity with us directly.
- Provide proof of your signed written permission for the authorized agent to submit a request on your behalf.
We may deny a request from an agent purportedly acting on your behalf if we request, and the agent does not submit, proof that he, she, or it has been authorized by you to act on your behalf.
Right to Consent to or Limit the Use of Your Sensitive Personal Information. You have the right to consent to the use of your Sensitive Personal information in CO, CT, VA and UT. Separately, you have the right in CA to instruct us to limit the use and disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods reasonably expected by an average consumer or for specific business purposes defined by law.
We do not use Sensitive Personal Information for purposes beyond those authorized by the CCPA, or beyond your consent.
Do Not Track & Global Privacy Control Signals. Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales. In certain territories, when we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.
Some browsers include a "Do Not Track" (DNT) setting that can send a signal to the websites you visit indicating you do not wish to be tracked. Unlike the GPC described above, there is not a common understanding of how to interpret the DNT signal; therefore, our Site does not respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the cookie controls and advertising controls described above.
California Consumer Rights
You have the right to submit requests related to the personal information we have collected about you. You may make such a request twice in a 12-month span. Please note, there are circumstances when we may not be able to comply with your request. For example, we may not be able to verify your request or we may find that providing a full response conflicts with other legal obligations or regulatory requirements. We will notify you if this is the case.
Right to Receive Information on Privacy Practices. You have the right to receive the following information at or before the point of collection:
- The categories of personal information to be collected;
- The purposes for which the categories of personal information are collected or used;
- Whether or not that personal information is sold or shared with Third Parties or disclosed to Vendors;
- If the business collects Sensitive Personal Information, the categories of Sensitive Personal Information to be collected, the purposes for which it is collected or used, and whether that information is sold or shared; and
- The length of time the business intends to retain each category of personal information, or if that is not possible, the criteria used to determine that period.
We have provided such information in this Supplemental Policy, and you may request further information about our privacy practices by using the contact information provided below.
Right to Know and Right to Access. You have the right to request certain information we have collected about you. You have the right to request:
- Specific pieces and categories of personal information we collected about you;
- The categories of sources from which personal information was collected;
- The purposes for which personal information was collected, shared, sold, or processed;
- The categories of personal information we shared, sold or disclosed; and
- The categories of Vendors or Third Parties with whom we shared, sold or disclosed personal information.
Right to Delete. You have the right to request that we delete certain personal information that we have collected.
Right to Correct. You have a right to request that we correct any inaccurate personal information we may retain about you.
Right to Opt-Out of the Sale and Sharing of Your Personal Information. You have the right to opt-out of the sale and sharing of your personal information with Third Parties, and the right to opt out of the processing of personal information for targeted advertising purposes, as defined under the CCPA.
We share personal information or process personal information for targeted advertising purposes. In the past 12 months, we have shared the categories of consumer personal information as listed in this Supplemental Policy. As a consumer, you have the right to opt-out of the sale and/or sharing of your personal information and of the processing of personal information for the purpose of targeted advertising. To submit an opt-out request, please access the below link or follow the “Instructions to Exercise Your Rights,” below. We do not knowingly sell or share personal information of consumers under 16 years of age.
“Do Not Sell or Share My Personal Information”
If you opt-out of the sale of your personal information, we will wait at least 12 months before asking you if we may sell or share your personal information.
You have the right to opt-in to the sale of your personal information after you have opted out. If you would like to opt-in to the sale or sharing of your personal information, please email us at customerservice@arrowheadforensics.com or call us at 800-953-3274. Opting-in is a two-step process in which you will first clearly request to opt-in, and then separately confirm that choice.
Right to Non-discrimination. You have a right to exercise the above rights, and we will not discriminate against you for exercising these rights. Please note that a legitimate denial of a request to access, delete, or opt-out is not discriminatory, nor is charging a fee for excessive or repetitive requests.
Colorado Consumer Rights
Colorado Consumers have the following rights regarding our collection and use of their Personal Information, subject to certain exceptions:
Right of Access. You may ask us to confirm whether we are processing your Personal Information and request to access your Personal Information.
Right to Correction. You may ask us to correct any inaccuracies in the Personal Information we maintain about you.
Right to Deletion. You may ask us to delete any Personal Information about you.
Right to Data Portability. You may ask to obtain your Personal Information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the Personal Information to another entity without hindrance. You may not exercise this right more than two times in a calendar year.
Right to Opt-Out. You have the right to opt out of the Sale of your Personal Information and the processing of your Personal Information for Targeted Advertising. You also have the right to opt-out of the processing of your Personal Information for purposes of Profiling in furtherance of decisions that produce legal or similarly significant effects.
Personal Information of Minors
We generally do not knowingly collect or process Personal Information of children under 13 years of age. For more information, please see our Privacy Policy. If you believe that a child has submitted personal information to us, please contact us at customerservice@arrowheadforensics.com and we will delete the information.
Additional California Privacy Rights
Shine the Light Request. California Civil Code Section § 1798.83 permits users of our website who are California residents to request information about our disclosure of personal information to other parties for their direct marketing purposes. To make such a request, please send an email to customerservice@arrowheadforensics.com with the subject “Shine the Light Request.”
California Residents Under Age 18. If you are a resident of California under the age of 18 and a registered user of our website, you may ask us to remove content or data that you have posted to the website by writing to customerservice@arrowheadforensics.com. Please note that your request does not ensure complete or comprehensive removal of the content or data as, for example, some of your content or data may have been reposted by another user.
Financial Incentives for California Consumers. We do not provide financial incentives to California Consumers who allow us to collect, retain, Sell, or Share their Personal Information. We will describe such programs to you if and when we offer them to you.
Changes to Our Supplemental Policy
Arrowhead Forensics reserves the right to amend this Supplemental Policy at our discretion and at any time. When we make changes to this Supplemental Policy, we will post an updated policy on our website with the effective date.
Additional Information
If you would like additional information regarding our Supplemental Policy, please contact us at customerservice@arrowheadforensics.com, 800-953-3274, or at the following address:
Arrowhead Forensics
11006 Strang Line Road
Lenexa, KS 66215
U.S.A