Plain English summary. If you live in California, you have specific rights about your personal information. We don't sell or share your data for advertising, but we want to be transparent about what we collect, why, and how to exercise your rights.
1. Scope
This Notice supplements our Privacy Policy and applies to California residents whose personal information we collect. It is provided pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act ("CCPA / CPRA").
2. Categories of personal information collected
In the past 12 months, we have collected the following categories of personal information:
- Identifiers (e.g., name, email, phone, IP address) — collected directly from you and automatically.
- Customer-records information (e.g., employer, role) — collected directly from you.
- Commercial information (e.g., services of interest) — collected directly from you.
- Internet or other electronic network activity (e.g., browsing on our Site) — collected automatically.
- Geolocation (approximate, derived from IP) — collected automatically.
- Inferences (e.g., business interest segments) — derived from the above.
- Professional or employment-related information (job applicants only) — collected directly from you.
3. Sources of personal information
- Directly from you (forms, email, calls, events).
- Automatically (cookies, server logs).
- From third parties (B2B data providers, referrers).
4. Business and commercial purposes for collection
We collect personal information to: respond to inquiries; provide and improve our services; secure our environment; communicate about our offerings; comply with legal obligations; and recruit personnel. See our Privacy Policy for details.
5. Categories disclosed for a business purpose
We disclose Identifiers, Customer-records information, Commercial information, Internet activity, and Geolocation to our service providers (e.g., hosting, analytics, CRM) under written agreements that limit their use to our purposes.
6. "Sale" or "Sharing" of personal information
We do not sell your personal information. We do not "share" your personal information for cross-context behavioral advertising. We have not done so in the past 12 months and have no current plans to.
7. Sensitive personal information
We do not knowingly collect or use sensitive personal information for purposes beyond what is necessary to provide our services and operate our business consistent with reasonable consumer expectations.
8. Retention
We retain personal information only as long as necessary for the purposes described in our Privacy Policy and to meet legal, audit, and reporting obligations.
9. Your California rights
You have the right to:
- Know what personal information we have collected, used, disclosed, and (if applicable) sold or shared about you.
- Access / portability — receive a copy of your personal information.
- Delete personal information we have collected.
- Correct inaccurate personal information.
- Limit use of sensitive personal information (we do not use it beyond permitted purposes).
- Opt out of sale or sharing (we do not sell or share, but you may submit a confirmatory opt-out).
- Non-discrimination — we will not deny goods or services, charge different prices, or provide a different level of quality because you exercised your rights.
10. How to exercise your rights
You may submit a verifiable consumer request by:
- Email: [email protected] — please put "California Privacy Request" in the subject line.
- Phone: (510) 224-4906
- Postal: Athena IT, Inc., 2261 Market St, STE 85291, San Francisco, CA 94114
We will acknowledge your request within 10 business days and respond substantively within 45 calendar days (with one 45-day extension if reasonably necessary). We may need to verify your identity before fulfilling certain requests.
11. Authorized agents
You may designate an authorized agent to make a request on your behalf. The agent must provide written authorization signed by you, and we may require you to verify your identity directly with us.
12. Global Privacy Control (GPC)
We honor opt-out preference signals such as Global Privacy Control where applicable. Even though we do not sell or share for cross-context behavioral advertising, we treat GPC as a confirmatory opt-out.
13. Notice at collection
This Notice serves as the notice at collection required by California law. The categories of personal information collected, the business and commercial purposes, and the disclosure practices are described above.
14. Changes
We will update this Notice as needed. The "Last updated" date will reflect the most recent revision.
15. Contact
Athena IT, Inc.
Privacy Team
Email: [email protected]