California Consumers: Data Subject Rights under the California Consumer Privacy Act (CCPA)
Categories of Personal Information Collected
We collect the following Personal Information:
Category | Examples | Reason for Collection |
---|---|---|
A. Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. |
|
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. |
|
C. Protected classification characteristics under California or federal law. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). |
|
D. Commercial information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | Not applicable, we do NOT collect these items. |
F. Internet or other similar network activity. | Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. |
|
G. Geolocation data. | Physical location or movements. | For health and safety reasons. |
H. Sensory data. | Audio, electronic, visual, thermal, olfactory, or similar information. | Not applicable, we do NOT collect these items. |
I. Professional or employment-related information. | Current or past job history or performance evaluations. |
|
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | Not applicable, we do NOT collect these items. |
Sources from which Information is Collected
We collect most of this Personal Information directly from you in person, by telephone, text, or email, and/or via our website and applications. However, we may also collect information:
- from publicly accessible sources (e.g., property records);
- directly from a third party, e.g., credit reporting agencies, or customer due diligence providers;
- from a third party with your consent (e.g., your bank);
- from cookies on our website; and
- via our IT systems, including automated monitoring of our websites and other technical systems, such as our computer networks and connections, communications systems, and email and instant messaging systems.
- applications for obtaining insurance coverage(s) and/or applications for surety bonds.
We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
TSIB Shares Your Personal Information for the Following Business Purposes:
- Auditing for website performance.
- Detecting security incidents, protecting against malicious, deceptive, or fraudulent, or illegal activity
- Debugging to identify and fix errors.
- Performing services including maintaining or servicing accounts, providing or fulfilling services.
- Verifying and maintaining the quality or safety of a service or device controlled by TSIB.
- Pricing and/or binding of insurance products and/or surety bond products.
Your Rights as a California Resident
Right to Access
You have the right to know:
- Categories of information collected about you
- Categories of sources from which information is collected about you
- Business or commercial purpose for collecting or selling personal information
- Categories of third parties with whom TSIB shares data
- Specific pieces of information TSIB has collected about you
Right to Deletion
You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.
We may not delete your Personal Information if it is necessary to:
- Complete the transaction
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
- Debug to identify and repair errors that impair existing intended functionality;
- Exercise free speech,
- Comply with an existing legal obligation;
- Otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Protection Against Discrimination
You have the right to not be discriminated against by us because you exercise any of your rights under the CCPA.
Right to Opt-out from the Sale of Personal Information
TSIB does not sell your personal information.
California Consumers: Consumer Rights Request
Exercising Access, Data Portability, and Deletion Rights
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:
- Calling us at (855) 214-7481; or
- Emailing us at [email protected]
Right to Use an Authorized Agent
You have the right to use an authorized agent to submit a request to know or a request to delete on your behalf. If you are using an authorized agent to submit the opt-out request on their behalf, TSIB may require that you:
- Provide the authorized agent written permission to do so; and
- Verify the agent’s and your own identity directly with TSIB.
Once we receive the request, we will determine whether your request is a valid verifiable consumer request. The request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format
We will respond to a CCPA request by following the procedures described in How we will respond to your data subject rights request.
Any disclosures we provide will only cover the twelve (12)-month period preceding the verifiable consumer request’s receipt.