Privacy Policy for California Residents

Privacy Notice for California Residents

Effective as of January 1, 2020

CST provides this Privacy Notice for California Residents (this “California Notice”) to supplement the information and disclosures contained in our Website Privacy Policy. This California Notice applies to all customers, website visitors, and others who reside in the State of California. We adopt this California Notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”), which is effective January 1, 2020. Any terms defined in the CCPA have the same meaning when used in this California Notice.

California residents have the right to request that a business disclose what personal information it collects, uses, discloses, and sells. The CCPA allows California residents to request that a business that collects consumers’ personal information disclose to consumers the categories of personal information that the business collects from consumers, the business or commercial purposes for collecting the information, and the categories of third parties with which the information is shared. California residents also have the right to submit a “Verifiable Consumer Request” to a business to request access in a portable and readily usable form (if technologically feasible) to the specific pieces and categories of personal information that the business has collected about the consumer, and to request the deletion of information under certain circumstances. Consumers have the right not to receive discriminatory treatment by a business for the exercise of the privacy rights conferred by the CCPA.

Sale of Personal Information

We do not sell your personal information to third parties.

Collection of Personal Information

We collect personal information about consumers and allow third parties to collect personal information on our behalf. In the last twelve months, we have collected the following categories of personal information for the business purpose(s) identified below (some categories may overlap):

Category of Information	Collected?	Business Purpose(s) for Use
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	YES	To comply with legal obligations To maintain an ongoing business relationship with you To verify your identity To provide goods and services to you To market our and our affiliates goods and services to you To improve our internal processes and the services we offer
Any categories of personal information described in subdivision (e) of Section 1798.80 (the California Customer Records statute).	YES	To comply with legal obligations To maintain an ongoing business relationship with you To verify your identity To provide goods and services to you To market our and our affiliates goods and services to you To improve our internal processes and the services we offer
Characteristics of protected classifications under California or federal law.	NO	We do not collect this information. This type of information may be received incidental to other information you provide to us for business purposes, such as when you provide a copy of a drivers’ license. However, we do not use this information.
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES	To provide goods and services to you To market our and our affiliates’ goods and services to you To improve our internal processes and the services we offer
Biometric information	NO	We do not collect this information. This type of information may be received incidental to other information you provide to us for business purposes, such as when you provide a copy of a drivers’ license. However, we do not use this information.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.	YES (through our mobile app only)	To provide goods and services to you. To market our and our affiliates’ goods and services to you. To improve our internal processes and the services we offer.
Geolocation data.	NO	We do not collect this information.
Audio, electronic, visual, thermal, olfactory, or similar information.	YES	Our ignition devices may record this type of information. We also record customer service calls. This information may be collected and used for the following business reasons: To comply with legal obligations To maintain an ongoing business relationship with you To provide goods and services to you To improve our internal processes and the services we offer
Professional or employment-related information.	YES	To comply with legal obligations. To maintain an ongoing business relationship with you. To verify your identity. To provide goods and services to you. To improve our internal processes and the services we offer.
Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99).	YES	To comply with legal obligations. To maintain an ongoing business relationship with you. To verify your identity. To provide goods and services to you. To improve our internal processes and the services we offer.
Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	YES	To provide goods and services to you To market our and our affiliates’ goods and services to you To improve our internal processes and the services we offer

Sharing of Personal Information

In the last twelve months, we have shared the following categories of personal information with the following categories of third parties (some categories may overlap):

Category of Information	Shared?	Categories of Third Parties
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	YES	Service Centers Probation Officers Monitoring Authorities The State of California Courts Parties that you authorize Our affiliate companies Payment processors Debt collectors Other service providers to assist us with our business operations, including shipping companies, auditors, and marketing, advertising, and communications service providers As part of a legal process
Any categories of personal information described in subdivision (e) of Section 1798.80 (the California Customer Records statute).	YES	Service Centers Probation Officers Monitoring Authorities The State of California Courts Parties that you authorize Our affiliate companies Payment processors Debt collectors Other service providers to assist us with our business operations, including shipping companies, auditors, and marketing, advertising, and communications service providers As part of a legal process
Characteristics of protected classifications under California or federal law.	NO	We do not collect this information. This type of information may be received incidental to other information you provide to us for business purposes, such as when you provide a copy of a drivers’ license. However, we do not use this information.
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES	Service Centers Probation Officers Monitoring Authorities The State of California Courts Parties that you authorize Our affiliate companies Other service providers to assist us with our business operations, including shipping companies, auditors, and marketing, advertising, and communications service providers
Biometric information.	NO	We do not collect this information. This type of information may be received incidental to other information you provide to us for business purposes, such as when you provide a copy of a drivers’ license. However, we do not use this information.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement..	YES (through our mobile app only)	Other service providers to assist us with our business operations, including shipping companies, auditors, and marketing, advertising, and communications service providers.
Geolocation data.	NO	We do not collect this information.
Audio, electronic, visual, thermal, olfactory, or similar information.	YES	Service Centers Probation Officers Monitoring Authorities The State of California Courts Parties that you authorize As part of a legal process
Professional or employment-related information.	YES	Probation Officers Monitoring Authorities The State of California Courts Parties that you authorize As part of a legal process Our affiliate companies Other service providers to assist us with our business operations, including shipping companies, auditors, and marketing, advertising, and communications service providers
Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99).	YES	Our affiliate companies Other service providers to assist us with our business operations, including shipping companies, auditors, and marketing, advertising, and communications service providers
Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	YES	Our affiliate companies Other service providers to assist us with our business operations, including shipping companies, auditors, and marketing, advertising, and communications service providers

Right to Know Requests

If you are a California resident, you have the right to request that we disclose to you:

The categories of personal information we have collected about you,
The categories of sources from which the personal information is collected,
The business or commercial purpose for collecting personal information,
The categories of third parties with whom we share personal information,
The specific pieces of personal information we have collected about you.

To submit a request, please review “How to Submit a Request” below.

Deletion Requests

If you are a California resident, you have the right to request the deletion of your personal information. We may claim legal exemptions for deletion of certain types of personal information pursuant to various CCPA exemptions. To submit a request, please review “How to Submit a Request” below.

How to Submit a Request

To submit a request under the CCPA, please call our toll-free number: 833-989-1425 or submit a request here:

Submit a CCPA Request

Name

Phone Number

Email Address

Description of Request

If you have questions or concerns about our privacy policies and practices, you can call our toll-free number: 833-989-1425 or submit your question or concern, above.

Verification Process

In order to process your request, we will need to verify your identity. A consumer can designate an authorized agent to make a request under the CCPA on the consumer’s behalf. If you are a California resident who would like to designate an authorized agent to make a request under the CCPA on your behalf, you can call our toll-free number: 833-989-1425 or submit your designation under “How to Submit a Request.”