The Site collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked to a consumer or personal device. For purposes of this Supplemental Notice, such information constitutes personal information.

(a) Personal Information Collected. Below are categories of personal information recognized by the CCPA along with examples (provided by the CCPA) of types of personal information in each category:

•  Identifiers. Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.
• CA Customer Records Statute categories. name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
• Protected Class Characteristics. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
• Commercial Information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Biometric Information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
• Internet/network activity. Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.
• Geolocation data. Physical location or movements.
• Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information.
• Professional/employment-related information. Current or past job history or performance evaluations.
• Non-public education information. Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
• Inferences drawn from other personal information. Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

(b) Exclusions. Personal information does not include publicly available information from government records, de-identified or aggregated consumer information, and information excluded from the CCPA’s scope (such as HIPAA–protected information and information protected by the Gramm-Leach Bliley Act). Personal information collected as part of a communication or transaction between DDW and a representative of a government agency or other business, where the transaction is made for providing or receiving a good or service to or from such government agency or other business or conducting due diligence in connection with the foregoing is also excluded from the scope of this Supplemental Notice except with respect to Section 4(c) (non-discrimination).

(c) Sources. We obtain Personal Information from you, including from you directly when you provide DDW with the information, from you indirectly when you interact with the Site, and from you when you make electronic communications to DDW.

DDW uses the personal information it collects in the ways described in Section 5 [link] of the Privacy Policy. DDW may use the personal information for commercial purposes as well as business purposes.

(a) Disclosure. DDW uses the personal information it collects in the ways described in Section 6 [insert link] of the Privacy Policy. DDW has not sold Personal Information within the past twelve months and does not sell Personal Information. The following chart identifies the categories of personal information recognized by the CCPA and collected by DDW, provides examples of the types of personal information within each category collected by DDW, indicates whether DDW has collected such categories of personal information during the past twelve months, the source of such personal information, how DDW uses such personal information, and to whom DDW has disclosed such personal information for a business purpose within the past twelve months:

(b) Sale. DDW does not sell personal information, including of minors under 18 years of age.

The CCPA provides you with specific rights as a California resident. This section identifies those rights and how to exercise them.

(a) Access and Data Portability. Subject to certain exceptions, you have the right to request certain information about DDW’s collection, use, and/or disclosure of your personal information over the past 12 months. After receipt of a verifiable consumer request from you, DDW will disclose to you the categories of personal information collected, categories of sources for the categories of personal information collected, business or commercial purpose for collecting such personal information, categories of third parties with whom DDW shared such personal information, and specific pieces of personal information collected about you.

(b) Deletion. Subject to certain exceptions, you may request that DDW delete Personal Information about you that it has collected and retained.

(c) Non-Discrimination. You have the right not to receive discriminatory treatment for the exercise of your privacy rights under the CCPA.

Only you or someone legally authorized to act on your behalf may make a verifiable consumer request related to your personal information. You may make a verifiable consumer request for access or data portability no more than twice within a 12-month period. If you are a California resident, you may make a verifiable requests to access or delete your personal information via the Site here [link], toll free by phone at (800) 227-2631 or by using any of the contact information set forth in Section 7 below. We will respond to your request consistent with applicable law.

Changes to the Supplemental Notice will be posted on this page. If DDW makes material changes to the way it treats users’ personal information, it may choose to notify you by email or through a notice in addition to posting. The date the Supplemental Notice was last revised appears at the top of the Supplemental Notice. You are responsible for ensuring that DDW has a current email address for you and for periodically visiting the Site and the Supplemental Notice to check for any changes.

If you have any questions or comments about this Supplemental Notice and DDW’s privacy practices, or if you wish to exercise your rights as a California resident, please contact DDW at: 100 S. Spring Street, Louisville, KY 40206, Attn: Ann Leonard, Ph: (800) 227-2631, email: ann.leonard@ddwcolor.com.