CCPA and CallRail

About the California Consumer Privacy Act and CallRail

First, a disclaimer: The information we discuss in this article is provided for informational purposes only and is not meant to serve as legal advice. CallRail customers and prospects should work closely with their legal counsel and other professional advisers to determine exactly how the CCPA may or may not apply to them.

Here’s a fact sheet put out by the California Department of Justice that covers the basics of the CCPA. If you’d like to read more in-depth, here’s a great blog post about it.

What is the CCPA?

The CCPA is a set of regulations put into law that grants new rights to California consumers:

  1. The right to know what personal information is being collected about them.

  2. The right to know whether their personal information is sold or disclosed and to whom.

  3. The right to say no to the sale of personal information.

  4.  The right to access (or request deletion of) their personal information.

  5. The right to equal service and price, even if they exercise their privacy rights.

  6. The right to data portability.

Who does the CCPA apply to?

The CCPA applies to “businesses,” which are companies that collect personal information from California residents and meet ONE or more of these minimum thresholds:

  1. Has annual gross revenues in excess of $25 million.

  2. “Collects” or “Sells” the personal information of 50,000 or more consumers, households or devices.

  3. Derives 50% or more of its annual revenues from selling consumers’ personal information.

CCPA also applies to “Service Providers,” which are companies that process personal information in the course of providing their services to businesses, and to “Third Parties” that receive personal information from businesses (often called “data brokers”).

CallRail’s customers are typically “Businesses” under CCPA, assuming they meet the requirements in the “Who does the CCPA apply to?” section above. CallRail will consider itself to be a Service Provider under CCPA, and will help with any requests to access or delete personal information sent by a customer to privacy@callrail.com. We don't sell or otherwise trade in the personal information that we process on our customers’ behalf for the limited purposes described in our privacy policy, such as sharing it as required by law or providing it to our service providers as necessary to provide the services to our customers. CCPA includes certain requirements for covered businesses that work with service providers, so you should consult your legal counsel for more information about these requirements.

Note: CCPA is a new law, and the California Attorney General has not yet published the final CCPA regulations that will affect how businesses and service providers interpret the law and respond to consumer requests. We encourage our customers to monitor these developments in 2020.

If you have questions about CallRail’s CCPA compliance, or for support with any California consumer requests that you receive about CCPA, please send your request to our Privacy team at privacy@callrail.com.

Requesting data erasure and exports

Current and former customers of CallRail can request that their data is erased, corrected, or exported for data portability. Please refer to the section “Collection of Personal Information” of our privacy policy for more information.

In order to complete any data erasure or export requests, we'll first need verification of identity. If you're an administrator on your account, we can verify your identity by account number and email address. If you're managing a CallRail account on behalf of another CallRail customer (for example, if you're an agency managing a CallRail account for one of your clients), we'll need the email address for the person you're making this request for.

Please allow up to 45 days for your requests to be completed. Once your data is deleted, we cannot recover it. This will impact your reports and the historical data associated with your account. Here's how to submit this type of request to our team:

  1. Use the Submit a Ticket form to start your request. You'll need to sign in to CallRail with your login email address. For former CallRail customers, use the login email address associated with your former CallRail account.

  2. Once you've reached our support form, choose Privacy for the question, "What can we help you with?"

  3. Choose one or more of the options available as the request type. This includes erasing all of your data, opting out of marketing emails, and exporting all of your data.

  4. Let us know if you're an agency requesting this on behalf of a customer, or if this is your CallRail account that you manage yourself. If you're submitting this request on behalf of someone else, we'll need their CallRail login email address to complete your request.

  5. Let us know if you plan to close your account after we complete your request.

  6. Include any additional information you think we should know, and submit your ticket to our team once you're ready.