iD TECH

PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

Effective Date: October 28, 2025


This Privacy Notice for California Residents supplements the information in the iD Tech Privacy Policy and applies solely to visitors, users, applicants, employees, and others who reside in the State of California who visit and iD Tech Website, or purchase/utilize a product or service from iD Tech. We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA).

I. Information We Collect

We collect personal information as defined under the CCPA/CPRA, including identifiers, customer records, commercial information, internet activity, geolocation, professional and educational data, and sensitive personal information (such as government IDs, account log-in data, precise location, racial or ethnic origin, or health information).

We disclose the categories of information collected, sources, and purposes in Annex A. We retain personal information only as long as reasonably necessary for the purpose collected or as required by law.

II. Use and Disclosure of Personal Information

We do not sell personal information, but we may share personal information for cross-context behavioral advertising as defined by the CPRA. You may opt out of such sharing by opting out via the cookies banner.

We use personal information for purposes, including providing and maintaining our Services, personalizing your experience, improving offerings, conducting internal research, audits, and security monitoring, complying with legal obligations, and evaluating or conducting mergers or acquisitions.

III. Disclosure for Business Purposes

We may disclose personal information to: service providers (e.g., hosting, analytics, payment processing), authorized agents or partners, and governmental authorities when legally required. We require all third parties to maintain confidentiality and restrict processing to legitimate business purposes.

IV. Your Rights Under the CCPA/CPRA

California residents have the right to:

·   Know and access the categories and specific pieces of personal information collected, used, disclosed, or shared.

·   Correct inaccurate personal information.

·   Delete personal information, subject to legal exceptions.

·   Opt-out of the sale or sharing of personal information.

·   Limit the use or disclosure of sensitive personal information.

·   Non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at privacy@idtech.com. We may need to verify your identity before responding. Requests will be processed within 45 days, extendable to 90 days when reasonably necessary.

Authorized agents may submit requests on behalf of consumers with written permission.

V. Data Retention

We maintain personal information for the period necessary to fulfill the purposes described or as required by law, generally no longer than seven years after the relationship ends, unless retention is needed for legal, compliance, or security purposes.

VI. Non-Discrimination

We will not deny services, charge different prices, or provide a lower level of service because you exercised your CPRA rights.

VII. Changes to This Notice

We may modify this notice at any time. The “Effective Date” above reflects the most recent revision. Any material changes will be posted on our website.

VIII. Contact Information

If you have questions about this notice or wish to exercise your rights, contact:

Email: privacy@idtech.com
Mail: iD Tech, PO Box 111720 Campbell, CA 95011
Phone: (888) 709-8324

You may also contact the California Privacy Protection Agency (CPPA) for additional information regarding your privacy rights.

Annex A – Categories of Data Collected and Retention

Category of Data

Purpose of Collection

Retention Period

Third-Party Recipients

Identifiers

Account setup, communication, service delivery

Up to 7 years

Service providers, location partners

Commercial Information

Transaction and purchase history

Up to 7 years

Payment processors, analytics

Internet Activity

Site functionality, analytics, and security

Up to 2 years

Analytics providers

Geolocation Data

Fraud prevention, service personalization

Up to 3 years

Security services, location poviders

Professional/Education Info

Employment and student verification

Up to 10 years

HR systems, partners

Sensitive Personal Information

Legal compliance, health/safety, service delivery

Up to 10 years or as required by law

Regulatory authorities, location partners, HR systems.