The Types of Data We Collect and Store
PDI is a privately owned company that provides voter data products and services to political organizations, operates Software-as-a-Service (SaaS) subscription services, software applications, voter data files and other services through our website or through mobile apps, including Calltime and Outreachcircle products and services (all of such software applications and services the “Services”), , and maintains the website politicaldata.com (the “Site”).
In the process of doing business and providing the Services, PDI collects and maintains information classified as both “Personal Data” and “Anonymous Data” using the following definitions:
a. Personal Data – “Personal Data” means data that allows someone to identify or contact you, including, for example, your name, delivery address, telephone number, e-mail address, voter registration information we provide you through use of the Services, as well as any other non-public information about you that is associated with or linked to any of the foregoing data.
b. Anonymous Data – “Anonymous Data” means data that is NOT associated with or linked to your Personal Data; Anonymous Data does not, by itself, permit the identification of individual persons.
It is important to understand PDI stores and maintains personal data that has been collected or acquired through different methods, with different levels of detail and different ownership rights. These methods include the following:
- PDI Client, System User, or Website Visitor Information (Client Data) – Individuals that use the Services or purchase data or services directly through a PDI account representative may be required to provide personal data for direct communication, processing a payment transaction, or creating a unique user account. This information may range from billing information to the user’s IP address. We collect and store this information to support PDI’s client /marketing communications, enhancement of client’s online experience, and to provide online security and system performance. PDI does NOT sell or share in any form any of such personal data or user information with any third-party entities.
- Information Submitted to the Site or While Using the Services – Users of the Services will frequently add or input personal data to our Site through data entry and bulk import functionality (such data, “Submitted Data”). The purpose of Submitted Data is to enhance the individual information for a voter or proprietary contact data. All information created and added to the Site by the user is exclusively owned by the contracted entity that provided payment for the data or software purchase or other Services. PDI does not sell or share in any form Submitted Data with any third parties.
Some organizations may desire to share data through the use of the Services with another PDI account used by another organization using our Services. The Services includes software that has data sharing functionality that utilizes a specific protocol requiring active consent from the organization sharing and receiving the data.
PDI sales or support team members are not authorized to provide any account information that could assist in the configuration of data sharing between two or more client organizations.
Submitted Data acquired by an organization can be exported at any time by such organization’s account administrator.
- Donation / Purchase Processing (Financial Transaction Data) – The Services supports custom webforms designed to process financial data. PDI uses third party components activated by the account owner to manage the financial transactions. To be clear, PDI does not store credit card information.
- Voter Information (Voter File Data) – Some of the Services provides voter data derived from government agencies to organizations permitted to use voter data under state or local law. Access to voter data is limited in how it may be used as well as the duration under the applicable purpose. Under no condition is access to voter data ever granted in perpetuity. While the exact voter data fields vary from state to state, they commonly include Name, Address, Birth Date, Gender, Party, Phone Number, and Email Address as provided by individuals on their voter registration forms. PDI has no authority to provide voter data or permit the use of voter data beyond the scope of applicable state or local law. PDI does not make any changes to voter data that could possibly impact a voter’s eligibility or status. We do not have the authority to add or remove voters on behalf of any government elections agency. It is the responsibility of individuals using PDI voter data to determine whether their use of the data is legally permissible. Voter data may never be used for personal or commercial use. Traditional political campaign methods often require the exporting of paper or electronic lists which can be provided by the Services . The organization purchasing the list or software subscription is responsible for protecting the privacy of individuals contained on such lists or files. All lists and electronic files that you obtain through use of the Services should be stored with personal privacy in mind and destroyed immediately after using. We ask that all users of the Services maintain and store these lists and files with a respectful consideration of the personal privacy of the individuals contained on these lists and files. Please treat these lists and files as if your personal information is included.
Disclosure of and Use of Personal Data
- Other Disclosures – Regardless of any choices you make regarding your Personal Data (as described below), we may disclose Personal Data if we believe in good faith that such disclosure is necessary (a) in connection with any legal investigation; (b) to comply with relevant laws or to respond to subpoenas or warrants served on us, our partners or third-party services providers; (c) to protect or defend our rights, property and/or other users of Services; and/or (d) to investigate or assist in preventing any violation or potential violation of the law or breach of our agreement with you.
Automatically Collected Information
When you access or use Services, we may automatically collect information about you, including:
- Log Information – We log information about your use of Services, including the type of browser you use, access times, pages viewed, your IP address and the page you visited before navigating to the Services.
- Device Information – We collect information about the computer or mobile device you use to access Services including the hardware model, operating system and version, unique device identifiers and mobile network information.
- Information Collected by Cookies and Other Tracking Technologies – We use various technologies to collect information, and this may include sending cookies to your computer or mobile device. Cookies are small data files stored on your hard drive or in device memory that helps us to improve Services and your experience, see which areas and features of Services are popular and visit counts. We may also collect information using web beacons (also known as “gifs,” “pixel tags” and “tracking pixels”). Web beacons are electronic images that may be used in connection with Services or emails and help deliver cookies, count visits, understand usage and campaign effectiveness and determine whether an email has been opened and acted upon. For more information about cookies, and how to disable them, please see “Your Choices” below.
PDI uses standard industry security measures to help protect your information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction of Personal Data. Unfortunately, it is impossible to guarantee that Personal Data is 100% secure. Please store passwords in a safe place and sign out when you are not in close proximity to your device. You are solely responsible for all activity done through your account and will immediately notify us at firstname.lastname@example.org if you have reason to believe that your account has been compromised.
Third Party links
Services include links to third-party websites. Some third-party websites may collect data or solicit personal information from you. We neither own nor control such third-party websites and are not responsible for their content or actions. Please read the terms and conditions and privacy policies of any third-party website that may be linked to Services.
- Account Information – You may update, correct or delete information about you at any time by logging in to your account. If you would like to cancel your account entirely, please contact us, and enter your request for cancellation, but please note that we may retain certain information as required by law or for legitimate business purposes.
- Changing or Deleting your Customer Personal Data – You may change any of your information (“Customer Data”) in your account by editing your profile within your account or by sending an e-mail to us at email@example.com or calling (562) 406-2360. You may request deletion of your Customer Data by us, and we will use commercially reasonable efforts to honor your request, but please note that we may be required to keep such information and not delete it (or to keep this information for a certain time, in which case we will comply with your deletion request only after we have fulfilled such requirements). When we delete any information, it will be deleted from the active database, but may remain in our archives. We may also retain your information for fraud or similar purposes. Please note that the policies described in the section may not apply to Personal Data associated with registered voter records.
- Cookies – Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Removing or rejecting browser cookies does not necessarily affect third-party flash cookies used in connection with Services. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of the Site. To delete or disable flash cookies please visit the following website for more information: www.adobe.com/products/flashplayer/security.
unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.
We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your chil has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
California Consumer Privacy Act – CCPA (Effective January 1st, 2020)
The CCPA, was passed by the California State Legislature in AB375 in 2018 and signed by the Governor that year. Subsequent legislation AB25, AB874, AB1146, AB1355 and AB1564 made modifications to the law. The total of these legislative protections take effect on January 1, 2020.
The CCPA places important protections on commercial use of personal data collected by entities doing business in California. It allows consumers to view any data collected on them, restrict use of that data and even have their data deleted under most circumstances.
PDI is required to comply with the CCPA for data that is acquired from our public website (politicaldata.com) and sales process. PDI is not required to comply with the CCPA for Personal Data associated with registered voters. Any adherence to the CCPA with regard to Personal Data associated with registered voters would be strictly voluntary and conditional. Please continue reading this section for more specific details.
The law creates two important exemptions for those working within areas of political free speech, governmental, and legitimate research. These can be found in two key sections of the new law:
Cal. Civ. Code § 1798.105 (d) (4) A business or a service provider shall not be required to comply with a consumer’s request to delete the consumer’s personal information if it is necessary for the business or service provider to maintain the consumer’s personal information in order to exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
Cal. Civ. Code § 1798.140 (f) For purposes of this title: “Commercial purposes” means to advance a person’s commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction. “Commercial purposes” do not include for the purpose of engaging in speech that state or federal courts have recognized as noncommercial speech, including political speech and journalism.
Amendments to the law in 2019 went further in three areas that provide additional protections for PDI clients that use data that we provide as part of our Services. These amendments to the law provide that data legally made available from federal, state or local governments is excluded from the provisions which apply to “personal information.” (Civil Code Section 1798.140 (O) (2)). These amendments further clarified that data such as voter files, political donor data, and other data commonly used by PDI is not subject to the provisions.
These amendments also provided greater clarity by defining “personal information” in a way that exempts de- identified or aggregate consumer data. (California Civil Code Section 1798.145 (a) (5)) This is the kind of data utilized by PDI in modeling and other voter targeting, and the amendment expressly excludes this data from the consumer protections under this law.
California Privacy Rights
California residents, in addition to the above Privacy Rights, are also entitled to certain additional information and have certain additional rights under the California Consumer Privacy Act (“CCPA”) as stated below.
Information We Collect and How We Use It
Below is a summary of our collection and use of “personal information” (as defined by the CCPA) about Consumers in connection with our Services. For additional details, please consult the other sections of this Privacy Notice.
Categories of personal information we may collect and use for our commercial and business purposes:
- Contact and account registration information. When you register for an account or contact us you may provide your name, email address, physical address, phone number, account username and password, electronic signature, and other related information.
- Financial or payment information. We collect information about payment methods that you provide, billing information, and information about the Services you subscribe for purchase.
- User information. When you use the Services, we may collect names and email addresses of parties using the Services and personal information about those individuals or their devices, such as name, email address, IP address, and authentication methods.
- Customer communications. We collect information about your customer service communications with us, including, for example, questions and other messages you address to us directly through online forms, by email, over the phone, or by post.
- Information about your web browser, mobile device, or internet connection. When you access our Services online, we may automatically collect IP address, device identifiers and device attributes, including cookie IDs, mobile advertising IDs, and other similar unique identifiers, data about how you interact with the Services online (usage data), location information (e.g., city, state, country, and ZIP code associated with your IP address or derived through Wi-Fi triangulation) and, with your permission in accordance with your mobile device settings, precise geolocation information from GPS-based functionality on your mobile device.
Purposes for which we use the personal information we collect:
- Provide you with and collect payment for the Services you request.
- Create your account and communicate with you.
- Market our Services by sending you emails.
- Test changes in our Services and develop new features and products.
- Fix problems you may have with our Services, including answering support questions and resolving disputes.
- Manage the Services platform including support systems and security.
- Comply with legal obligations.
- Meet legal retention periods.
- Establish, exercise, or defend our rights in legal claims.
The Right to opt Out of Sales of Personal Information
Consumers have the right to opt out of “sales” of their personal information under the CCPA.
No Sale of Personal Information
In the preceding twelve (12) months, we have not sold and will not sell any personal information to
nonaffiliated third parties without your consent. We, also, have not and will not sell the personal information of minors under 16 years of age to non-affiliated third parties without affirmative authorization.
Right to Know About Personal Information Collected, Used, or Disclosed
You have the right to request that we disclose certain information to you about our collection, use and disclosure of your Information over the past 12 months. Once we receive your request and verify your identity, we will disclose to you: (1) the categories of Information we collected about you; (2) the categories of sources for the Information; (3) our business or commercial purpose for collecting or disclosing that Information; (4) the categories of third parties with whom we shared that Information; and (5) the specific pieces of Information we collected about you in the preceding 12 months.
Right to Delete Personal Information Collected or Maintained
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your request and verify your identity, we will permanently delete (and direct our service providers to delete) your personal information from our records, unless a legal exception to deletion applies. In our response to your request to delete, we will specify the manner in which we have deleted your personal information or, if we must deny your deletion request, the basis for this refusal.
Right to Non-Discrimination for Exercise of Privacy Rights
We will not discriminate against you for exercising any of your rights by: (a) denying you goods or services; (b) charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) providing you a different level or quality of goods or services; or (d) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Exercising Your Rights
To exercise the rights described above, please submit a verifiable consumer request to us by either:
Authorizing an Agent
You may designate an authorized agent to submit your consumer request on your behalf, so long the authorized agent has your written permission to do so and you have taken steps to verify your identity directly with us.
Verifiying Your Request
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request. You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
To verify your identity, we ask that you to provide us with the following information when you submit your request: (1) first name, (2) last name, and (3) phone number or email. We will use the above information to verify your identity. Depending on your type of request or the information requested by you, we may require additional information to verify your identity and fulfill your request.
California law also requires that we disclose how we respond to “do-not-track requests” from our users. At this time, we do not currently respond to “do-not-track” requests from our users’ browsers.
“Shine the Light”
California residents may ask for a list of third parties that have received your personal information for direct marketing purposes during the previous calendar year. This list also contains the types of personal information shared. We provide this list at no cost. If you are a California resident and would like to request this information, please contact us at firstname.lastname@example.org.