Your Rights as a Californian

Consumers (California residents) have the right to make the following requests to covered businesses. The requests may be made by a consumer, by a consumer on behalf of the consumer’s minor child, or by a person authorized by the consumer to act on the consumer’s behalf. Toyon may decline to honor any request if doing so would conflict with its rights or obligations under applicable law, including but not limited to California or federal employment law or regulations.

Right to Request Information About Collection, Disclosure, Sale or Sharing

You have the right to request that a business disclose to you: (i) the categories and specific pieces of Personal Information the business has collected about you within the past 12 months, (ii) the categories of sources from which the Personal Information is collected, (iii) the business or commercial purposes for collecting, Selling or Sharing Personal Information, and (iv) the categories of third parties to whom the business discloses Personal Information.

If a business Sells or Shares Personal Information, or discloses it for a business purpose, you also have the right to request that the business disclose the following with respect to the 12-month period preceding your request: (i) the categories of Personal Information that the business Sold or Shared about you and the categories of third parties to whom the Personal Information was Sold or Shared, and (ii) the categories of Personal Information that the business disclosed about you for a business purpose.

This type of request may be referred to as a “Request to Know.” Before we can honor a Request to Know, we need to verify that the person making it is the consumer whose Personal Information we have. Our method for verifying any particular request weighs information we receive as part of the request, the sensitivity of the consumer information at issue, and the risk of harm to the consumer from unauthorized disclosure.

Right to Request Deletion

You have the right to request that a business delete any Personal Information that the business has collected from you. This type of request may be referred to as a “Request to Delete.”

Before we can honor a Request to Delete, we need to verify that the person making the request is the consumer whose Personal Information we have. Our method for verifying any particular request weighs information we receive as part of the request, the sensitivity of the consumer information at issue, and the risk of harm to the consumer from unauthorized deletion.

We are not required to delete Personal Information if we still need it in order to perform a contract with you, comply with a legal obligation, or accomplish any other objective recognized as an exception to the right to deletion under applicable law.

Right to Request Correction

You have the right to request that a business correct inaccurate Personal Information about you. This type of request may be referred to as a “Request to Correct.”

Right to Opt-Out of Sale or Sharing

You have the right to direct a business that Sells or Shares Personal Information about you to third parties not to Sell or Share your Personal Information. This type of request may be referred to as a “Request to Opt-Out.”

Right to Limit Use and Disclosure of Sensitive Personal Information
If a business collects Sensitive Personal Information* for the purpose of inferring characteristics about you, you have the right to request that the business limit its use and disclosure of your Sensitive Personal Information to that use and disclosure which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests such goods and services. (Toyon does not collect Sensitive Personal Information for the purpose of inferring characteristics about you within the meaning of the CCPA.)

*Sensitive Personal Information includes social security number; driver’s license or state identification number; complete account log-in credentials; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of a consumer’s mail, email and text messages (unless the business is the intended recipient of the communication); genetic data; biometric information; health information; and information concerning sex life or sexual orientation.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment by a business for the exercise of your privacy rights under the CCPA.

How to Exercise Your Rights with Toyon

How to Submit a Request To “Know,” “Delete” or “Correct”

You can submit a Request to Know, Delete or Correct by clicking on the Contact Us link at the top of each webpage. The request must state “CCPA Request” and include

• your first and last name;
• an email address at which you can be reached for purposes of the request;
• the date and manner in which you contacted Toyon.
•  the California county in which you reside;
• for a Request to Know, the disclosure(s) you are requesting;
• for a Request to Delete, a clear statement that you want us to delete your Personal Information;
• for a Request to Correct, an explanation of why you believe the Personal Information we have about you is incorrect.

If you are submitting a request on behalf of a job applicant as their authorized representative, you must include the foregoing information about the applicant and provide proof of permission from the applicant to make the request.

After confirming receipt of your request, we’ll contact you if we need more information in order to verify it. If we can’t verify a request, we may deny it.

Changes to This Notice

We reserve the right to update or change this Notice or our Privacy Policy at any time and you should check them periodically. If we make any material changes, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.

Contact Us

If you have any questions or concerns about this Notice, please contact us via the Contact Us link at the top of every web page at www.toyon.com.