Additional U.S. State Privacy Disclosures

1. Collection, Use, Disclosure, and Storage of Personal Information

The following summarizes categories of personal information we may have collected in the preceding 12 months, depending on how you interact with our Site, accounts, shop, quote tools, and support channels. More detail appears in our Privacy Notice.

2. Types of Personal Information We Collect

We may have collected the following categories of personal information:

• Identifiers — such as name, email address, phone number, mailing or shipping address, account identifiers, and login-related identifiers. We may disclose this information for business purposes to service providers that support our operations, and to other parties where required by law or with your direction.
• Records about you — such as the content, timing, and method of communications you have with us (for example emails, contact forms, and support messages) and other information you choose to share. We may disclose this information for business purposes to service providers that help us operate communications and support, and as required by law.
• Commercial information — such as order and quote details, products of interest, cart or wishlist activity, invoices, and related transaction records. Payment card data is typically processed by our payment processor. We may disclose commercial information for business purposes to service providers, fulfillment partners, and as required by law.
• Internet or network information — such as IP address, browser type, device information, pages visited, referring URLs, access logs, and cookie or similar technology data when those technologies are used as described in our Cookie Notice. We may disclose this information for business purposes to service providers (for example hosting, security, and consented analytics) or as required by law.
• Approximate location — such as a general location inferred from IP address. We do not intentionally collect precise geolocation through the Site. We may disclose approximate location-related technical data for business purposes to service providers or as required by law.
• Professional or employment-related information — such as employer or company name, job title, department, and business-account role (for example owner or authorized sub-user). We may disclose this information for business purposes to service providers and, where needed to fulfill a B2B relationship, as directed by your organization or as required by law.
• Inferences — such as product or service interests drawn from your Site activity or purchase/quote history, used to improve our catalog, support, and communications. We may disclose this information for business purposes to service providers or as required by law.
• Sensitive personal information (where applicable, including California) — we do not intentionally collect government ID numbers, precise geolocation, biometric templates, or health data through the Site. Limited payment-related information may be processed in connection with checkout by our payment processor. We use and disclose any such information only as reasonably necessary to provide requested goods or services, detect security incidents, resist fraud or illegal activity, comply with law, or for other purposes permitted by applicable law. We do not sell sensitive personal information, and we do not use it for targeted advertising or to infer characteristics about you beyond what is needed to complete a transaction or operate your account.

3. Sources of Personal Information

We may collect personal information from the categories of sources described in the “Sources of Personal Information” section of our Privacy Notice, including directly from you, from your organization or authorized users on a business account, from devices and browsers used to access the Site, and from service providers that support operations.

4. Use and Disclosure of Personal Information

We may use and disclose personal information for the business purposes described in our Privacy Notice, including fulfilling orders and quotes, operating accounts (including multi-user business accounts), providing support, securing our services, communicating about products and services where permitted, improving the Site, and complying with law.

vCloud Choice Inc. does not sell personal information for monetary or other valuable consideration, and does not share personal information for cross-context behavioral advertising, as those terms are defined under California law. We disclose personal information to service providers and contractors that help us operate the Site and fulfill orders (for example payment processing, hosting, security, consented analytics, email/communications, support tools, and shipping), and as otherwise required or permitted by law. Those providers are not authorized to use your personal information for their own independent marketing.

Because we do not sell or share personal information for cross-context behavioral advertising, a separate “Do Not Sell or Share My Personal Information” request flow is not required for our current practices. You may still manage optional cookies and similar technologies through our Cookie Preference Center, and review our Cookie Notice. We do not knowingly sell or share the personal information of consumers under 16 years of age.

5. Retention of Personal Information

We retain personal information, including any sensitive personal information we process, only as reasonably necessary for the purposes described in our Privacy Notice and these Disclosures. Criteria include the time needed to service your account or orders, comply with legal and regulatory obligations, establish or defend legal claims, and support legitimate business operations. When information is no longer reasonably needed, we delete or de-identify it where practicable.

6. Your Privacy Rights

If you are a resident of California, Colorado, Nebraska, Rhode Island, Texas, or Virginia, you may have the following rights related to personal information we have collected about you, subject to verification and exceptions under applicable law:

• The right to know what personal information we have collected about you, how we use it, and to access that information.
• The right to request correction of inaccurate personal information we maintain about you.
• The right to request deletion of personal information.
• The right to opt out of the sale or sharing of personal information, as those terms are defined by applicable law (noting our current practice that we do not sell or share for cross-context behavioral advertising).
• The right to object to or opt out of certain processing, such as targeted advertising and certain profiling, where those rights apply under your state’s law.
• The right to data portability — requesting a copy of personal information in a usable format, where required.
• The right not to receive discriminatory treatment for exercising privacy rights. If exercising a right limits our ability to process information needed to provide products or services, we may no longer be able to provide those products or services in the same way.

If you are a resident of Colorado, Rhode Island, Texas, or Virginia, you may have the right to appeal our denial of a request. To submit an appeal, email [email protected] with “Privacy Appeal” in the subject line and include enough detail for us to locate your original request.

California residents may also have rights under California’s “Shine the Light” law regarding certain disclosures to third parties for their direct marketing. We do not currently provide personal information to third parties for those parties’ direct marketing purposes. To submit a Shine the Light inquiry, email [email protected] and state that you are making a request under the Shine the Light law.

7. Submitting Requests

You may exercise applicable rights by emailing [email protected] with a clear subject line (for example “State Privacy Request,” “California Privacy Request,” or “Texas Privacy Request”), or by calling (214) 234-9361. Please include enough information for us to identify you and understand your request.

We recognize Global Privacy Control (GPC) opt-out preference signals where required and as implemented on our Site. When a valid signal is received, it is recognized for the browser or device that sends the signal, as described in our Cookie Notice. Learn more at https://globalprivacycontrol.org/.

We may take steps to verify your identity before processing a request. Verification may require successful authentication of your account or matching information you provide to records we maintain. We may request additional personal information solely to complete verification.

You may be able to use an authorized agent to submit a request on your behalf where permitted by law. We may verify both your and your agent’s identity and request proof that you authorized the agent. We may deny a request from an agent that does not submit sufficient authorization.

8. Changes to These Disclosures

We may update these Disclosures from time to time to reflect changes in our practices or applicable law. When we do, we will revise the “Last updated” date on this page. If we make material changes, we will provide notice as required by applicable law, which may include updating this page, posting a notice on the Site, or contacting you using information associated with your account. Changes are effective when published unless we state otherwise.

We encourage you to review this page periodically for the latest information on our U.S. state privacy practices.

9. How to Contact Us

Questions or requests about these Disclosures or other privacy matters may be sent to [email protected] or by calling (214) 234-9361.

Postal inquiries may be addressed to: vCloud Choice Inc., 6860 Dallas Pkwy Suite 200 Plano, Texas 75024.