Privacy Notice for California Residents
This notice is provided under the California Consumer Privacy Act of 2018 (CCPA) and explains how BrandLock collects and handles personal information — with clear distinctions between our corporate website and our client-facing JavaScript services.
Understanding This Notice
This Privacy Notice governs how BrandLock processes information collected from consumers who reside in California (“Consumers” as defined under CCPA). Any terms defined in the CCPA carry the same meaning here.
This notice is an integral part of our Privacy Policy. Definitions used but not defined here have the meaning ascribed in that policy. For more on your California privacy rights, visit oag.ca.gov/privacy.
brandlock.io
Our corporate website where visitors may submit forms, request demos, create accounts, or contact us directly. This is where personal identifiers and contact information are collected.
- Collects names, emails, and contact details
- Processes account and billing information
- Applies to site visitors and registered customers
- Standard PII collection for business operations
JavaScript Tag & Optimization
Our client-facing JavaScript service deployed on customer websites for conversion optimization. This service does not collect any personally identifiable information (PII).
- Does not collect names, emails, or contact info
- Only collects anonymous online identifiers (UUID, IP)
- Collects browsing interaction data for optimization
- No PII is ever stored or processed
Categories of Personal Information Collected
The table below details the categories of Personal Information we collect (and have collected within the last 12 months), with clear indication of what applies to the Website versus BrandLock Services.
| Category | Examples | Website | BrandLock Services |
|---|---|---|---|
| A.1 Personal Identifiers | Real name, alias, postal address, unique personal identifier, email address, account name, Social Security number, driver’s license number, passport number, or similar identifiers. | Collected | Not Collected |
| A.2 Online Identifiers | Universally Unique Identifier (UUID), Internet Protocol (IP) address. | Collected | Collected |
| B. California Customer Records (Cal. Civ. Code § 1798.80(e)) | Name, signature, address, telephone number, insurance policy number, education, employment, bank account number, credit/debit card number, financial information, medical information, or health insurance information. | Collected | Not Collected |
| C. Protected Classifications | Age, race, color, ancestry, national origin, citizenship, religion, marital status, medical condition, disability, sex, sexual orientation, veteran or military status, genetic information. | Not Collected | Not Collected |
| D. Commercial Information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Not Collected | Not Collected |
| E. Biometric Information | Genetic, physiological, behavioral, and biological characteristics, fingerprints, faceprints, voiceprints, iris or retina scans, keystroke, gait, or other physical patterns. | Not Collected | Not Collected |
| F. Internet or Network Activity | Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | Not Collected | Collected |
| G. Geolocation Data | Physical location or movements. | Not Collected | Not Collected |
| H. Sensory Data | Audio, electronic, visual, thermal, olfactory, or similar information. | Not Collected | Not Collected |
| I. Professional or Employment Info | Current or past job history or performance evaluations. | Not Collected | Not Collected |
| J. Non-Public Education Info | Education records directly related to a student maintained by an educational institution — grades, transcripts, class lists, student schedules, financial information, or disciplinary records. | Not Collected | Not Collected |
| K. Inferences | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Not Collected | Not Collected |
Disclosures of Personal Information for a Business Purpose
In the preceding twelve (12) months, BrandLock has disclosed the following categories of Personal Information for a business purpose:
Category A: Identifiers
We disclose your Personal Information for a business purpose to the following categories of third parties: service providers and data aggregators (e.g., for analytics purposes) and business partners (for fraud detection).
When we disclose Personal Information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract.
Use of Personal Information
We may use or disclose the Personal Information we collect for one or more of the following business purposes:
Fulfillment & Response — To fulfill or meet the reason you provided the information, such as responding to your inquiry.
Service Improvement — To analyze and improve the quality and effectiveness of our Services.
Security & Fraud Prevention — To maintain the safety, security, and integrity of our Services and detect fraud.
Legal Compliance — To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Amendments
As required under the CCPA, we will update this Privacy Notice every 12 months. The last revision date is reflected in the “Revised” date shown at the top of this notice.
Contact Us
If you have any questions or concerns regarding privacy issues, or wish to be provided with any other information related to our privacy practices, please contact us:
