Privacy Notice for California Residents

Updated & Effective Date: February 15, 2024

This Privacy Notice for California Residents (“Privacy Notice”) supplements the information contained in the American Printing House for the Blind (“APH”) Privacy Policy and only applies to individuals and households who reside in the State of California (“consumer” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and any terms defined in the CCPA and CPRA have the same meaning when used in this notice.

If you have a disability, please click APH’s Web Accessibility statement for additional support. If this Privacy Notice is provided offline, please ask us to provide you with the Privacy Notice in an alternative format to accommodate your accessibility needs.

Please use the links below to access the sections of this Privacy Notice that interests you.

• Information We Collect
• Purpose for Collection and Use of Personal Information
• Use of Personal Information
• Retention of Your Personal Information
• Selling Personal Information
• Disclosing Personal Information
• Using Your Sensitive Personal Information
• Your Right to Know
• Your Right to Obtain a Copy of Your Personal Information
• Your right to correct inaccurate personal information
• Your Right to Delete Your Personal Information
• Right to Opt-Out and Your Privacy Choices
• Opt-out Preference Signals
• How to Exercise Your CCPA Rights
• Non-Discrimination
• Notice of financial incentives
• Children’s Information
• Changes to This Privacy Notice
• Contact Information

1. Information We Collect

APH’s website (“Website”) may collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”).

In particular, our Website collects the following categories of personal information from its consumers within the last twelve (12) months:

Category	Examples	Collected
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, or other similar identifiers.	YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, physical characteristics or description, address, telephone number, education, employment, or medical information. Some personal information included in this category may overlap with other categories.	YES
C. Protected classification characteristics under California or federal law.	Age, medical condition, physical or mental disability, sex (including gender).	YES
D. Commercial information.	Products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	YES
G. Geolocation Information.	Physical location or movements.	YES
H. Sensory Information.	Audio, electronic, visual, thermal, olfactory, or similar information.	YES
I. Professional or employment-related information.	Current or past job history or performance evaluations.	NO
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))(“FERPA”).	Personally identifiable information from education records directly related to a student maintained by an educational institution or party acting on its behalf, such as the student’s name, grade, primary reading medium, date of birth, the name of the student’s parent.	YES
K. Inferences drawn from other personal information.	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO

 

Personal information does not include:

• Publicly available information from government records.
• Aggregated, non-personal consumer information. Aggregated, non-personal consumer information is information that does not identify or is reasonably linkable to any individual.
• Information excluded from the CCPA’s scope, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and
  • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

APH obtains the categories of personal information listed above from the following categories of sources:

• Directly from you. For example, from forms you complete or products you use.
• Indirectly from you. For example, from observing your actions on our Website using cookies and web beacons.
• Third parties. For example, student records from an educational agency or institution.

2. Purpose for Collection and Use of Personal Information

APH collects and uses the personal information for following business purposes:

• To fulfill or meet the reason you provided the information. For example, if you request to be included on an email list, we will use that personal information to respond to your request. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.
• To provide you with support and to respond to your inquiries, including technical support and address your concerns about your transactions, and monitor and improve our responses.
• To create, maintain, customize, and secure your account with us.
• To personalize your Website experience and to deliver content and product and service offerings relevant to your interests, including promotions and non-commercial ads through our Website, third-party sites, and via email or text message (with your consent, where required by law).
• To respond to law enforcement requests and as required by applicable law, regulatory inquiries, subpoenas, court order, or governmental regulations.
• When collecting your personal information or as otherwise set forth in the CCPA.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

3. Use of Personal Information

In the last 12 months, we have used your personal information for the business and commercial purposes described below.

• Category A: Identifiers
• Category B: Personal Information categories listed in the California Customer Records statute
• Category C: Protected classification characteristics under California or federal law
• Category D: Commercial Information
• Category F: Internet or other similar network activity
• Category G: Geolocation data
• Category H: Sensory Information
• Category J: Non-public education information per FERPA

4. Retention of Your Personal Information

We will retain your personal information as reasonably necessary for the disclosed purpose. The retention periods for each category of personal information, including sensitive information, vary depending on compliance with relevant laws, your request for deletion, and our retention policies. For example, we may need to retain your personal information to comply with our legal or reporting obligations in accordance with the laws or to defend against claims. Consequently, it is not possible for us to provide a definitive length of time. Our retention periods are determined by using and balancing the following criteria:

• The volume, nature, and sensitivity of your information;
• The potential risk of unauthorized access, use or disclosure, or misappropriation;
• The purposes for which we process your personal information; and
• The retention obligations under applicable legal requirements.

5. Selling Personal Information

Selling your personal information means us selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, by electronically, your personal information to a third party for monetary or other valuable consideration.

We have not sold your personal information in the last 12 months.

6. Disclosing Personal Information

The business and commercial purposes for which we have disclosed your personal information in the last 12 months are as follows:

• Disclosing your personal information for business purposes. We have shared the following categories of personal information with our service providers for our business purposes:
  • Category A: Identifiers
  • Category B: Personal Information categories listed in the California Customer Records statute
  • Category C: Protected classification characteristics under California or federal law
  • Category D: Commercial Information
  • Category F: Internet or other similar network activity
  • Category G: Geolocation data
  • Category H: Sensory data
  • Category J: Non-public education information per FERPA

The business purposes for sharing such information with service providers include performing transactions such as payment processing, registering accounts, managing our relationship with you, and monitoring for security threats and fraud.

We provide the above categories of personal information for business purposes to the following service providers: payment processors/service providers, web hosting services, professional service providers such as auditors and lawyers, and consultants. When we disclose personal information for a business purpose, we enter into a contract that describes the purpose and requires the recipient of that personal information to keep it confidential and not to use it for any purpose except to perform the contract.

Sharing your personal information for commercial or other purposes. We do not share your personal information for cross-context behavioral purposes.

We provide no categories of personal information for commercial purposes to the following service providers: analytics services, and online marketing services.

7. Using Your Sensitive Personal Information

Sensitive personal information means personal information that reveals (a) a consumer’s social security number, driver’s license, state identification card, or passport number; (b) a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) a consumer’s precise geolocation; (d) a consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership; (e) the contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication (f) consumer’s genetic data; (g) biometric information for the purpose of uniquely identifying a consumer; (h) personal information collected and analyzed concerning a consumer’s health; (i) personal information collected and analyzed concerning a consumer’s sex life or sexual orientation.

In the last 12 months, we may have collected and used the following sensitive personal information.

• A consumer’s precise geolocation.

Sensitive Personal Information that we collect is used for payment processing or to protect your health and well-being. We will not use sensitive information for the purpose of inferring characteristics about a consumer. Because this is the only use of sensitive personal information and our use is reasonably necessary and proportionate to the purpose, we are not required to post a notice of right to the limit use of sensitive personal information.

8. Your Right to Know

You have the right to request that we disclose certain information to you about our collection, use, disclosure, and sale of your personal information over the past 12 months. Once we verify your request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• If we sold or shared your personal information for a business purpose, two separate lists disclosing: sales, identifying the personal information categories that the recipient purchased; and disclosures for a business purpose, identifying the personal information categories that recipient obtained.

9. Your Right to Obtain a Copy of Your Personal Information

You have the right to obtain a copy of the specific pieces of personal information we collected about you (also called a data portability request). Once we verify your request, we will provide you with a copy of your personal information that is responsive to your request.

10. Your Right to Correct Inaccurate Personal Information

You have the right to request us to correct any inaccurate personal information we maintain about you, taking into account the nature of that information and purpose for processing it. Once we receive a verifiable consumer request, we will process your request.

11. Your Right to Delete Your Personal Information

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

12. Right to Opt-Out and Your Privacy Choices

If you are age 16 or older, you have the right to direct us not to sell or share your personal information at any time. To exercise this right to opt-out, you (or your authorized representative) may submit a request to us by visiting the Contact & Opt-Out Information page.

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize your personal information sharing. However, you may change your mind and opt back into personal information sharing at any time.

13. Opt-out Preference Signals

Opt-out preference signals or Global Privacy Controls (GPC) provide consumers with a simple and easy-to-use method by which consumers interacting with us online can automatically exercise their opt-out of sale/sharing rights. Opt-out preference signals must meet the following requirements:

• A signal that is in a format commonly used and recognized by businesses; and
• The technology or mechanism that sends the opt-out preference signal makes clear to the consumer that the use of the signal is meant to have the effect of opting the consumer out of sale and sharing of their personal information. For example, such technology or mechanism may be an HTTP header field, JavaScript Object, or most commonly, a browser tool or extension that allows users to send the opt-out signal.

Because we do not sell or share your personal information for cross-context behavioral purposes, we currently do not process the opt-out preference signals or GPC.

14. How to Exercise Your CCPA Rights

To exercise your right to know, right to obtain a copy, or right to delete your personal information as described above, please submit your request to us by contacting us at 1-800-223-1839 or submit your request via the Contact & Opt-Out Information page.

How we verify requests and respond to requests?

Before fulfilling your request, we take steps to verify that you are who you say you are or you have the authority to act on someone else’s behalf. Therefore, upon receipt of your request, we may request additional information that we need to verify you and, if you are submitting a request on behalf of someone else, to verify that you are permitted to act on that person’s behalf.

When we contact you to request verification information, please respond and provide the information that we have requested. Depending on the nature of your request, we will verify your identity to either a reasonable or high degree of certainty. This may mean that we need to match two or three pieces of information that we hold about you with information that you provide to us.

In addition to providing the information we need to verify you or your authority, you must provide us with enough information so that we can understand, evaluate, and respond to your request. We cannot respond to your request or provide you with personal information if we cannot confirm the personal information relates to you.

We will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request and to locate relevant information. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and to understand, evaluate, and respond to your request.

We cannot delete personal information in those situations where our retention is required for our own internal business purposes or otherwise permitted by the CCPA (such as fraud prevention or legal compliance). In these situations, we will retain your information in accordance with our records retention program and securely delete it at the end of the retention period.

Who may submit requests?

Only you, or someone legally authorized to act on your behalf, may make a request related to your personal information. You may also make a request on behalf of your minor child. You may designate an authorized agent to make a request on your behalf by registering such person or entity with the California Secretary of State.

How often can you submit requests?

You may make a CCPA consumer request twice within a 12-month period.

Response timing and format

We will attempt to respond to a verifiable consumer request within forty-five (45) days of receipt. If we require an additional forty-five (45) days to respond to your request, we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. When you request a copy of your personal information, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity easily.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide a cost estimate before completing your request.

15. Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. You have the right not to receive discriminatory treatment by us for exercising your privacy rights.

16. Notice of Financial Incentives

We do not offer financial incentives or pricing discounts for providing your personal information or registering an account with us.

17. Children’s Information

Our Website is not intended for children under 13 years of age. We will not knowingly solicit or collect personal information from children under 13, or the relevant minimum age under applicable local legal requirements, except as permitted under applicable law. If we learn that we have received information directly from a child under 13 without his or her parent’s or legal guardian’s consent, we will make commercially reasonable efforts to delete such information.

18. Changes to This Privacy Notice

Changes to this Privacy Notice will be posted on this site, along with information on any material changes. The Company reserves the right to update or modify this Privacy Notice at any time and without prior notice. If the changes to our Privacy Notice are substantial, we will contact you before the changes take place.

19. Contact Information

If you: (a) have any questions or comments concerning this Privacy Policy or about your personal information; (b) wish to make corrections to any personal information you have provided; (c) want to opt-out from receiving future commercial; or (d) wish to withdraw your consent to sharing your personal information with others, you may contact us in the following ways:

By Mail:
American Printing House for the Blind
ATTN: Information Governance & Privacy Compliance
1839 Frankfort Avenue
Louisville, KY 40206
By Phone: (toll free) 1-800-223-1839
By FAX:  502-899-2284 (fax)
By Email: privacy@aph.org
By Webform: Please go to: https://www.aph.org/privacy-inquiry-contact-form

We will respond to your request and, if applicable and appropriate, make the requested change in our active databases as soon as reasonably practicable.