Scope
This notice supplements our Privacy Policy for California residents. It describes practices and rights under the California Consumer Privacy Act, as amended (“CCPA”), to the extent the CCPA applies to Cost2Action’s processing. Business-to-business information may be covered where required by law.
Categories we may collect
Depending on your interaction, we may collect identifiers and contact information; professional and company information; account, payment and tax information; internet, device and network activity; approximate location; campaign, click, conversion and attribution data; communications; fraud and quality signals; and inferences used to evaluate campaign or partner performance.
Sensitive information may include account credentials, payment or tax details and precise location only when supplied or required for a specific service. We do not use sensitive personal information to infer characteristics about consumers beyond permitted business purposes.
Sources and purposes
Sources may include you, your company, advertisers, agencies, publishers, affiliates, app developers, MMPs, fraud-prevention providers, analytics or advertising technologies, public sources and service providers.
We use information to provide and secure services, evaluate partnerships, configure and measure campaigns, attribute and validate events, prevent fraud, reconcile reporting and payments, communicate, improve products, comply with law and protect rights and systems.
Disclosure, sale and sharing
We may disclose relevant information to campaign parties, MMPs, fraud-detection providers, hosting and analytics vendors, payment and professional advisers, and authorities where required. We do not knowingly sell personal information for money.
Some online advertising or cross-context behavioral advertising disclosures may be considered “sharing” or a “sale” under California law even when no money is exchanged. You may opt out through our Do Not Sell or Share page or a supported Global Privacy Control signal. We do not knowingly sell or share personal information of consumers under 16.
California rights
- Know the categories, sources, purposes, recipients and specific pieces of personal information collected.
- Request deletion, subject to legal and operational exceptions.
- Correct inaccurate personal information.
- Opt out of sale or sharing for cross-context behavioral advertising.
- Limit certain uses and disclosures of sensitive personal information where the right applies.
- Receive equal service and non-discriminatory treatment for exercising privacy rights.
GPC and privacy choices
We treat a supported, user-enabled Global Privacy Control (“GPC”) signal as a browser-level request to opt out of sale or sharing for that browser. When detected, our consent manager keeps marketing cookies disabled. Because GPC is generally browser- or device-specific, use the signal or our privacy-choice control on each browser or device you use.
You may change ordinary cookie preferences through the website’s “Cookie settings” control. A later affirmative choice will not override a detected GPC signal for marketing cookies on that browser.
Submitting a request
Email us with the type of request, your name, business email and enough information to locate relevant records. We may verify access, deletion or correction requests by matching information already maintained and may request proof of authority from an authorized agent. Opt-out requests do not require an account and generally do not require identity verification, although limited information may be needed to apply the choice to the correct records.
hello@cost2action.comRetention and updates
Retention depends on the nature of the information and service, including active relationships, campaign reconciliation, fraud prevention, accounting, tax, dispute and legal requirements. We update this notice when practices or applicable requirements materially change.