The California Consumer Protection Act

In 2018, California passed the California Consumer Protection Act, a measure that works to put the control of your data in your hands. This act applies to any company doing business with individuals residing in California.

We have provided our complete CCPA compliance policy below, along with links to assist you in submitting legal data requests. Precis Solar has tools that allow you to submit CCPA requests easily. We ask that you review the CCPA policy below to understand how the law affects you and what rights you have when submitting requests.

Your Rights Under the California Consumer Privacy Act (CCPA)

• What is the California Consumer Privacy Act (CCPA)?
• What information does Precis Solar collect, and how is it used?
• What rights do I have under the CCPA?
• What information is excluded from CCPA requests?
• What information does Precis Solar collect, and why?
• What services does Precis Solar Energy use that may relate to the CCPA?
• How do I submit a CCPA request to Precis Solar?

What is the California Consumer Privacy Act (CCPA)?

In 2018, California passed the California Consumer Privacy Act (CCPA), a privacy-centric bill aimed at protecting the privacy of California consumers, effective January 1, 2020. This bill establishes guidelines for businesses managing consumers’ Personally Identifiable Information (PII) and empowers consumers to regulate its use. Precis Solar has always taken the privacy and security of customer data seriously and has implemented steps that empower you in compliance with the CCPA.

Under the CCPA, consumers have the right to request access to their information that we hold, request deletion of that data, request a disclosure of our data collection practices and how we use the data, and request to opt out of selling their data to third parties. Precis Solar does not and will never sell or rent the types of information outlined in this document.

The CCPA requires that businesses disclose the following information: how data is used, whether it may be shared with third-party services, and how the business’s website responds to “Do Not Track” signals from web browsers.

Additionally, the CCPA protects consumers from discrimination when they exercise their rights.

Notice to consumers doing business with Precis Solar outside of California.

While the California Consumer Privacy Act legally only applies to consumers in California, we have standardized this process and will honor requests made by consumers who have interacted with Precis Solar in any state. We are committed to providing the same privacy protections to our customers and potential customers, whether in California or in other states within the U.S.

Details for how to submit CCPA requests and detailed information on how we use consumer data outlined below also apply to any consumer located in the U.S.

What information does Precis Solar collect, and how is it used?

Precis Solar collects both personally identifiable information (PII) and non-personally identifiable information when consumers contact us with interest in Precis Solar offerings and during the ensuing communications to service these requests. This data is stored for the purposes of communication, advertising, and providing agreed-upon or contracted delivery of products and services. We may, at times, share this information with trusted third parties for advertising and marketing purposes, services that we require to conduct regular business, or services that allow us to enhance the services provided to consumers both online and offline.

The information we may collect is as follows, and the specific information we collect from each person will depend on the types of interactions and communications that are chosen by that person. Some items listed below may not be considered personally identifiable information on their own, but they could become so when combined with other items.

• Full name
• Phone number
• Email address
• Physical address
• IP address
• Google Client ID (if available)

We may receive additional information voluntarily provided by you when requesting information about products and services offered by Precis Solar or participating in the sales process.

For more details on how your information is used on our website and online, please review our Privacy Policy

How does the CCPA allow me to make requests regarding my personally identifiable information?

Under the CCPA, California consumers may have the right to make personal information requests, known as the “Right of Access” and “Right of Deletion.” The CCPA requires that businesses respond to all requests within 45 days, and these requests are as follows:

• Right of Access—The consumer may have the right to request and receive a list of personal information and additional details a business collects (or has collected) as well as the intended business use for collecting the data. A Right of Access request entitles a person to request the data collected for the previous 12 months no more than twice within that time period. A Right of Access request restricts the provision of highly sensitive data, including social security numbers and banking information.
• Right of Deletion—The consumer may also be able to request that any specific personal information be deleted. With the exception of specific types of data (outlined below under ‘What information is excluded from CCPA requests?’), these deletion requests must be fulfilled by Precis Solar, and once a deletion request is fulfilled, we will have no access to any data that was previously available to us, which means that Right of Access requests cannot be fulfilled from that point forward.
• Right to Request Disclosure of Data Practices—The consumer may have the right to request disclosure of our business’ data collection and sales practices in connection with the requesting customer, including categories of personal information we have collected, the source of information, our use of the information, and the categories of personal information disclosed or sold to third parties as well as the categories of third parties to whom such information was disclosed or sold. Precis Solar does not sell or rent any personally identifiable information to any third party, partner, or entity.
• Right to Opt-Out of the Sale of Data—The CCPA allows consumers to opt out of the sale of their data to third parties. Precis Solar does not and will never sell or rent personal information to third parties. Because of this company policy, we do not provide a method to opt out of the sale of consumer data.
• Rights Against Discrimination—The consumer is entitled to not be discriminated against for exercising their rights under the CCPA.

How do you verify the identity of consumers making CCPA requests?

Protecting consumers’ data from fraudulent requests is the highest priority in Precis Solar’s CCPA compliance procedures. All CCPA requests must be validated through strict measures to ensure that the individual submitting the request owns the information in question. Confirmation methods may include, but are not limited to, the following:

• Verification of information that we have on record.
• Confirmation of identity using multiple communication methods.
• Providing physical identification.

Precis Solar will confirm and validate any and all requests made for both Right of Access and Right of Deletion requests while protecting the personally identifiable information related to the request itself. If we are unable to validate and confirm the identification of the individual submitting a CCPA request, Precis Solar is legally obligated and reserves the right to deny it. Requests must be made by the individual whose data is the subject of the request exclusively—the CCPA does not allow for other members of the household to request data on behalf of others within that household unless they are a legal parent or guardian of the minor for whom the request is being made. For the purposes of the CCPA, a minor is defined as a person 13 years of age or younger.

What circumstances may affect Precis Solar’s requirement to comply with a CCPA request?

Certain circumstances may limit or prevent Precis Solar from fulfilling its legal obligation to comply with a Right of Deletion request. According to the CCPA, a deletion request cannot be fulfilled for a Precis Solar customer where personally identifiable information is required for conducting ongoing business or fulfilling standing contractual obligations.

If the identity of the requester cannot be confirmed, Precis Solar may deny requests for the Right of Deletion and Right of Access. This provision protects both consumers and companies from fraudulent and malicious requests by third parties.

The CCPA has been interpreted to state that a Right of Deletion request implies that the individual is also opting out of any further use or collection of that data in the future. However, there may be times when, while following a Right of Deletion request, Precis Solar might not have any data that would help us confirm if we had received any previous requests about that data. In the event that you believe we have come into possession of your data either directly or indirectly, please contact us to submit another Right of Access or Right of Deletion request.

If you have a question regarding requests involving Precis Solar that you believe may be affected by these provisions, please contact us by sending an email to info@precissolar.com or by calling our phone number at (951) 800-7926.

Would it be possible to confirm that a CCPA request to Precis Solar has been fulfilled?

Yes. Precis Solar keeps an anonymized ledger of requests made so that any individual who has made a request, person/organization legally representing an individual who has made a request, or government entity can confirm and verify that a request was received and fulfilled. All confirmation inquiries are also subject to identity verification to ensure that the person or organization submitting a confirmation request is qualified to receive this information. The records of fulfillment are made using a technique that changes personal information into a secure format, which lets us track CCPA requests without keeping any identifiable personal information.

To create and maintain verifiable records, every request is recorded with the following information:

• An anonymized (salted/hashed) value for the methods used to communicate with the person making the request
• Date of the request
• Date of Precis Solar’s response
• Date of the request’s fulfillment
• Type of request made by the individual (Access, Delete, Lookup)
• Manner/method in which the request was made
• Type of response (accepted or rejected)
• Description and details of denial if the request is denied in whole or in part.
• Email address of the Precis Solar employee who worked to fulfill the request.

This information will be provided to a properly verified individual or organization in response to a request described above. These confirmation requests will also be recorded.

How does the organization secure and anonymize PII in its CCPA request ledger?

Maintains ledgers that make use of salted/hashed values for the contact information used to fulfill the request made. This allows us to store a record of the transaction without requiring that we retain any personally identifiable information. When a value (such as an email address or phone number) is hashed, it cannot be “unhashed.” The result is an encrypted version of the original value. No two hashes are alike, and when the same original value is hashed again, it will always result in the same encrypted string.

By using this method, we are able to convert contact information to an encrypted string, delete the records we have, and, at a later date, provide a lookup of that record by rehashing the information an individual provides and then searching for that anonymized value in our request logs. For reference, this secure method of data storage is how the passwords you use on websites and apps are stored and protected.

For more details on what hashing is and how it works, read more here: https://en.wikipedia.org/wiki/Hash_function

How do I opt out of select services that Precis Solar uses?

Precis Solar uses third-party services to help provide a better advertising experience for those interested in Precis Solar and/or the products and services that Precis Solar provides. These are listed below, and they provide for the ability to opt out. The list provided below is not a complete list of all third-party services, and only those services that are affected by the CCPA are listed here. For a full list of third-party services that we use online, please refer to our Privacy Policy

How do I submit a CCPA request to Precis Solar?

In compliance with the CCPA, Precis Solar provides more than one method to submit a CCPA request. Methods include calling our dedicated toll-free number, sending an email to our CCPA address, or submitting a request via a secure online form. The online form simplifies the request process by allowing the individual making the request to provide information upfront that can help expedite its review and fulfillment. However, we welcome communication via any method and will service all requests equally. If you are ready to submit a request, please ensure that you are familiar with the information located here. If you have questions about making a request or would like more information, please call or email us for assistance.

The Precis Solar dedicated CCPA phone number:

(951) 800-7926

The Precis Solar dedicated CCPA email address:

info@precissolar.com

Last updated 8/16/2023