CCPA Supplement

This document ("CCPA supplement") is part of our Terms of Use and Sale for Businesses and applies only to the extent that we, as a service provider to you, receive personal information (as defined in the CCPA) from you about your consumers who are residents of the State of California in the United States ("CCPA data").

Words or expressions specified in "quotation marks" have the same meaning in this CCPA supplement. Unless otherwise specified below, any words or expressions defined in the Terms of Use and Sale for Businesses (including the Data Processing Agreement) have the same meanings when used in this CCPA supplement.

• Compliance with the CCPA: We are aware of the CCPA's obligations (including any rules issued under the CCPA) and will follow them in connection with the services we provide to you.
• CCPA data received from you: Except as necessary to provide our services to you or unless otherwise permitted by the CCPA:
• We will not process, keep, or utilize CCPA data; and
• We will not sell or disclose CCPA data to any third party.
• Invitation data: If the type of review invitation services we provide to you necessitates the receiving or processing of CCPA data, we do it in line with the Data Processing Agreement.
• Security practices: We will apply the same security policies to CCPA data that we outline in the Security practices section of our Data Processing Agreement. On your request, we will provide you with enough information to ensure that we are adhering to these security procedures.
• Training and confidentiality: We shall make certain that all individuals who have access to CCPA data in the course of delivering services to you are aware of how CCPA data must be treated under the CCPA and are subject to a duty of confidentiality.
• Consumer requests: You or we may receive requests from your customers seeking to exercise their CCPA rights in connection with your usage of our services ("consumer requests").
• If we receive a consumer request, we shall notify the asking consumer that he or she should submit the request to you, as you will be responsible for responding to these requests; and
• If you receive a consumer request, we shall give you reasonable assistance in responding to it in accordance with the CCPA.
• Deleting and retaining CCPA data: We shall erase, or give you access to, all or part of the CCPA data at your request, unless we are permitted to retain such information under the CCPA or obligated to retain it under relevant law. If we keep CCPA data, it will be subject to our Terms of Use and Sales for Businesses as well as our CCPA supplement.