SiteGround California Consumer Privacy Act Addendum (previous version)

This version of SiteGround California Consumer Privacy Act Addendum was published on September 28, 2022 and is applicable until June 30, 2023 only for SiteGround customers whose last order has been made before June 27, 2023.

The updated version of SiteGround California Consumer Privacy Act Addendum can be seen here.

This Addendum supplements the information contained in the SiteGround Privacy Policy and applies to Website visitors, Customers, Users, Registrants, End Users, Affiliates and other individuals (incl. households) who are residents of the State of California, USA (“consumer”, “you”, “your”). 

For avoidance of doubt, the term “data subject” used in the Privacy Policy shall correspond to the term “consumer” used herein and the term “personal data” in the Privacy Policy shall be equivalent to the term “personal information” used herein. All other terms which are not explicitly defined in this Addendum shall have the meaning as set forth in the Privacy Policy. 

This Addendum is drafted in compliance with the California Consumer Privacy Act (“CCPA”) and other relevant California privacy laws and its purpose is to provide additional privacy disclosures and to inform you of your additional rights as a California resident.


I. Categories of personal information we collect

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer (“personal information”).

Section I (“Categories of data subjects and types of personal data”) of the Privacy Policy describes in detail what categories of personal information we have collected from consumers within the last twelve (12) months.

 

II. Sources of personal information collection

Apart from you, being the main source of information we collect about you, we may also collect personal information from publicly accessible sources (e.g. companies trade register, WHOIS, local national list(s) of sanctioned persons) and/or third parties, such as our affiliates, trusted partners, including but not limited to marketing, advertising, security service providers, etc.

 

III. Purposes for collection of personal information 

The business and commercial purposes for which we collect, use and disclose personal information about consumers is described in detail in Section III (“Purposes of and legal basis for data processing”) of the Privacy Policy.

 

IV. Sharing of personal information

We may disclose and share personal information to categories of third parties as set forth in Section V (“Sharing of personal data”) of the Privacy Policy. 

 

V. Sale of personal information 

In the course of provision of our Services we do not sell any personal information related to consumers.

Under the CCPA, “sell,” “selling,” “sale,” or “sold,’’ means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration. Therefore, it does not necessarily mean money was exchanged for the transfer of personal information, but the transfer may still be considered a “sale”. 

SiteGround has taken substantial steps to identify whether any of our data sharing arrangements would constitute a “sale” under the CCPA. Due to the complexities and ambiguities in the CCPA, we evaluate some of our third-party relationships periodically.

 

VI. Consumer rights under the CCPA

The CCPA provides consumers with specific rights with respect to their personal information as follows:

  1. Right to opt-out from sale of personal information

A consumer shall have the right, at any time, to direct SiteGround not to sell the consumer’s personal information (“the right to opt-out”). Such a request of the consumer shall be respected for at least twelve (12) months before requesting that the consumer authorizes again the sale of the consumer’s personal information. In order to process the consumer’s request, SiteGround may use any personal information collected from the consumer in connection with the submission of the consumer’s opt-out request solely for the purposes of complying with the opt-out request. 

The opt-out right may be exercised at the following link:  “Do Not Sell or Share My Personal Information”.

  1. Right to know request

Pursuant to the CCPA, you have a right to request information about the collection, use, and disclosure of your personal information performed by SiteGround over the preceding twelve (12) months, as well as to ask to provide you with these specific information:

  • Categories and specific pieces of personal information we have collected about you;
  • Categories of sources from which we collect personal information about you;
  • Purposes for collecting, using, or selling personal information;
  • Categories of third parties with which we share personal information;
  • If applicable, categories of personal information sold about you and the categories of third parties to which the personal information was sold, by category or categories of personal information for each third party to which the personal information was sold.

As per the CCPA SiteGround shall take into consideration the following requirements when answering a consumer’s request:

  • The consumer shall place a verifiable consumer request. SiteGround is not obliged to provide information to the consumer if it cannot verify that the consumer making the request is the consumer about whom SiteGround has collected information or is a person authorized by the consumer to act on consumer’s behalf; 
  • SiteGround is obliged to provide the required information no more than twice in 12 (twelve) months; 
  • The provision of information by SiteGround is generally free of charge; 
  • SiteGround shall provide the required information within 45 (forty-five) days of receiving the consumer’s request. The time period to provide the required information may be extended once by an additional 45 (forty-five) days when reasonably necessary, and upon notification to the consumer. The disclosure shall cover the 12-month period preceding the receipt of the verifiable consumer request and shall be made in writing and delivered through the consumer’s Client Area, if the consumer maintains an account with us, or by mail or electronically at the consumer’s option if the consumer does not maintain an account with us, in a readily useable format that allows the consumer to transmit this information from one entity to another without hindrance. SiteGround may require authentication of the consumer that is reasonable in light of the nature of the personal information requested, but shall not require the consumer to create an account in order to make a verifiable consumer request. If the consumer maintains an account with SiteGround, we may require the consumer to submit the request through its Client Area.


  1. Right to delete request - you also have a right to request that we delete a part of or all your personal information, subject to certain exceptions (i.e., when the information is necessary to: complete a transition or provide a service requested by you; debug or repair expected product functionality; detect or investigate cyber threats, etc.). Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records, unless an exception applies.


  2. Right to remain non-discriminated - SiteGround shall not discriminate against a consumer because the latter exercised any of the consumer’s rights under the CCPA, including, but not limited to, by:

  • Denying any services to the consumer;
  • Charging different prices or rates for services, including through the use of discounts or other benefits or imposing penalties; 
  • Providing a different level or quality of services to the consumer; 
  • Suggesting that the consumer will receive a different price or rate for services or a different level or quality of services.

If you have additional questions regarding your rights under the CCPA, please refer to the SiteGround Privacy Policy and contact us at privacy@siteground.com.