Last Updated Date: January 1, 2025

U.S. State Supplemental Privacy Notice

This U.S. State Supplemental Privacy Notice (“Supplemental Notice“) supplements our main Privacy Notice (collectively, our “Privacy Statements“) and applies to residents of U.S. states with comprehensive privacy legislation, such as the California Consumer Privacy Act of 2018, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, and other similar laws that may be enacted (each, a “State Privacy Law“). Our Privacy Statements explain how we collect, use, and disclose information that identifies you or could reasonably be used to identify you (referred to in this Supplemental Notice as “personal information“).

Enformion, LLC is the primary entity responsible for the personal information you provide or that is collected through our Services, as detailed in our Privacy Notice.

Key Points to Understand:

Data Sources: Our Data Products typically consist of information collected from publicly available sources and third parties. Some of this information is subject to the Gramm-Leach-Bliley Act and the Driver’s Privacy Protection Act, among other requirements (referred to as “Regulated Data“).

Use of Regulated Data: Data Products containing Regulated Data are used for specific purposes such as fraud protection and identity verification. Before accessing Regulated Data, our customers must complete a credentialing process to ensure compliance with applicable laws

State Privacy Laws: While our Privacy Statements include certain information about our collection and use of Regulated Data and publicly available information, this type of data is generally not covered by State Privacy Laws.

If you have a disability that prevents or limits your ability to access our Privacy Statements, please contact us by visiting our Contact Page or calling us at 855-281-3915. We will work with you to provide the notices in an alternative format.

Collection and Disclosure of Personal Information. The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth in the “Personal Information We Collect” (Section 2) and “How We Use Personal Information” (Section 3) of our Privacy Notice.

The tables below describe the categories of personal information we have collected and the entities to whom we may have disclosed that personal information for business purposes, as well as those to whom we have “sold” or “shared” that personal information. For more details on why we may share, sell, or disclose personal information to each of the third parties listed, please refer to the “How We Disclose Your Personal Information” section (Section 4) of our Privacy Notice.

Personal Information That May Be Disclosed for a Business Purpose

Personal Information	Categories of Third Parties to Whom Personal Information May Be Disclosed for a Business Purpose
Identifiers Includes your name, postal address, email address, telephone number, date of birth, unique personal identifier, online identifier, or other similar identifiers.	Service Providers Business Partners Professional Advisors Government Entities, Law Enforcement, and Similar Third-Party Entities Third Parties Involved in Potential Business Transactions
Professional or Employment-Related Information Includes details such as your company name, industry, role within your company, educational and professional background, information about data users in your organization who may be authorized to use your account, and additional details related to the organization with which you are affiliated.	Service Providers Business Partners Professional Advisors Government Entities, Law Enforcement, and Similar Third-Party Entities Third Parties Involved in Potential Business Transactions
Commercial Information Includes payment and encrypted credit card information and your, or your company’s, records of Services purchased, obtained, or considered. Please note that payments are processed with the assistance of a third party.	Service Providers Business Partners Professional Advisors Government Entities, Law Enforcement, and Similar Third-Party Entities Third Parties Involved in Potential Business Transactions
User Feedback and Surveys Includes information about your experience with our Services.	Service Providers Business Partners Professional Advisors Government Entities, Law Enforcement, and Similar Third-Party Entities Third Parties Involved in Potential Business Transactions
Search Criteria Includes information Customers provide, such as names, phone numbers, addresses, or other identifiers, relevant to the searches they may perform using our Data Products.	Service Providers Business Partners Professional Advisors Government Entities, Law Enforcement, and Similar Third-Party Entities Third Parties Involved in Potential Business Transactions
Internet or Other Electronic Network Activity Information Includes your Internet Protocol (IP) address and Internet Service Provider (ISP). We also gather data regarding your interaction with our Services, such as the pages you visit before, during, and after using our Services, the content and links you engage with, the frequency and duration of your activities, and other related usage information.	Service Providers Business Partners Professional Advisors Government Entities, Law Enforcement, and Similar Third-Party Entities Third Parties Involved in Potential Business Transactions
Device Information Includes your Media Access Control (MAC) address, mobile carrier, mobile advertising identifiers, and other unique identifiers. Additionally, we gather cookie identifiers, browser or device information, and information regarding your user settings.	Service Providers Business Partners Professional Advisors Government Entities, Law Enforcement, and Similar Third-Party Entities Third Parties Involved in Potential Business Transactions
Geolocation Information Approximate location data derived from your IP address.	Service Providers Business Partners Professional Advisors Government Entities, Law Enforcement, and Similar Third-Party Entities Third Parties Involved in Potential Business Transactions
Sensitive Personal Information Limited to information provided as part of our credentialing processes to access certain Data Products, and may include identification numbers (e.g., Social Security numbers, driver’s license numbers, state identification card numbers, and passport numbers); financial and account information (e.g., account log-in details, financial account numbers, debit card numbers, credit card numbers, and any associated security or access codes, passwords, or credentials); and location data (e.g., precise geolocation information collected for purposes of onsite inspections).	Service Providers Professional Advisors Government Entities, Law Enforcement, and Similar Third-Party Entities Third Parties Involved in Potential Business Transactions

Personal Information That May Be Sold

Personal Information	Categories of Third Parties to Whom Personal Information May Be Sold

Identifiers Includes real name, alias, current and former postal address, telephone or mobile contact number, names of relatives, email address, and other similar identifiers.	Customers Business Partners

Personal Information That May Be Shared

Personal Information	Categories of Third Parties to Whom Personal Information May Be Shared
Identifiers Identifiers such as online identifier, Internet Protocol address, and other similar identifiers.	Advertising Partners Internet Service Providers
Internet or Other Electronic Network Activity Information Includes your Internet Protocol (IP) address and Internet Service Provider (ISP). We also gather data regarding your interaction with our Services, such as the pages you visit before, during, and after using our Services, the content and links you engage with, the frequency and duration of your activities, and other related usage information.	Advertising Partners Internet Service Providers
Device Information Includes your Media Access Control (MAC) address, mobile carrier, mobile advertising identifiers, and other unique identifiers. Additionally, we gather cookie identifiers, browser or device information, and information regarding your user settings.	Advertising Partners Internet Service Providers
Geolocation Information Approximate location data derived from your IP address.	Advertising Partners Internet Service Providers

Retention of Personal Information. We store the personal information we collect for as long as necessary to fulfill the purpose(s) for which it was collected and for other purposes described in the “Retention of Personal Information”[link to these sections of Privacy Notice} section (Section 9) of our Privacy Notice.

We Do Not “Sell” or “Share” Personal Information of Children. We do not have actual knowledge that we “sell” or “share” personal information about consumers under 18 years of age either as those terms are commonly understood or as they are defined under U.S. state privacy laws.

Your Privacy Rights

Consumer Rights. If you live in a U.S. state and are an individual with rights granted under an applicable State Privacy Law, you may be eligible to request to exercise the privacy rights, as detailed further in our Privacy Notice. For your convenience, we have summarized certain key points below.

Request to Know. You may have the right to request confirmation of whether we are processing or have processed your personal information. Additionally, you may be able to request disclosure of the personal information we have collected about you, including:
- The categories of personal information we have collected
- The categories of sources from which such personal information is collected
- The business or commercial purposes for collecting, selling, or sharing your personal information
- The categories or specific third parties to whom we disclose or have disclosed your personal information
- The specific pieces of your personal information that we maintain or have processed

Request to Delete. You may have a right to request that we delete the personal information that we may maintain about you.

Request to Correct Inaccurate Personal Information. You may have the right to request thatwe correct our copy of your personal information where it is inaccurate or incomplete.

Request to Opt-Out of Sale, Sharing, and Certain Profiling Activities. As explained in our Notice of Right to Opt-Out of Sale and Sharing of Personal Information, you may have the right to opt out of certain activities involving your personal information. Specifically, you can opt out of our “sale” of your personal information to third parties, the “sharing” of your personal information for targeted or cross-context behavioral advertising, and certain profiling activities that result in legal or similarly significant effects on you. However, please note that we do not use personal information for such profiling activities.

As explained above, our Data Products include Regulated Data and publicly available information, which is generally not covered by U.S. state privacy laws. This includes data from public records. If you request to opt out of the sale of your personal information, we will try to apply your request to the publicly available information we collect, as a courtesy. However, this will not remove the data from its original source. This means your information may still appear on other websites or be accessible through other services. Also, we regularly receive new public records so even if you opt out, your publicly available information may appear in our Data Products again in the future. We recommend you periodically refresh your opt-out request using the methods described below.

Request to Limit. You have the option to request a limitation on the use of your Sensitive Personal Information for profiling or inferring characteristics about you or others. However, the Sensitive Personal Information we collect, as that term is defined by applicable state privacy laws, is not utilized for these purposes. Therefore, this request does not apply to our business.

Right to No Discrimination. You have a right not to receive discriminatory treatment for the exercise of your privacy rights.

Exercising Your Privacy Rights.

Request to Know, Delete, or Correct Your Personal Information. If you want to know what personal information we have about you, delete it, or correct it, you can reach out to us in two ways:
- Online: Visit our Privacy Portal
- Phone: Call us at 855-281-3915

Request to Opt Out. To opt out of the selling or sharing of your personal information, please choose one of the following methods:
- Online: Visit our Opt-Out Form
- Phone: Call us at 855-281-3915

Additionally, you must adjust your cookie settings or send an opt-out preference signal, such as the Global Privacy Control, to prevent the selling or sharing of personal information that may occur through the Collection Technologies we use. For detailed instructions, please refer to the “Collection Technologies Preferences” section (Section 6) of our Privacy Notice.

How We Process Requests. We will process your requests in accordance with applicable laws and subject to the following:

Verification Methods. Once you submit a request, we will verify that you are the consumer to which the request pertains by matching the identifying information provided by you (e.g., name, email address, phone number) to the information we maintain. Depending on the type of request you submit, we will attempt to match either two or three of the data points you provided. If we are unable to verify your request with the data points you provided, we may reach out to you for additional information to verify your request. Please note that opt-out requests do not require verification.

Authorized Agent. Your “authorized agent” can submit a request on your behalf using the same methods described above. We may ask the authorized agent to provide a signed authorization from you, confirming their authority to act on your behalf. Additionally, we might require you to verify your own identity directly with us.

Appeal. You may have the right to appeal our decision or response to your request. To exercise your right to appeal, please visit our Contact Page or call us at 855-281-3915.

California Metrics Reporting. We compile and disclose specific metrics regarding the number of CCPA privacy requests we received and processed during the previous calendar year.

Texas Data Broker Disclosure.

WE ARE A DATA BROKER REGISTERED UNDER TEXAS LAW. TO CONDUCT BUSINESS IN TEXAS, A DATA BROKER MUST REGISTER WITH THE TEXAS SECRETARY OF STATE (TEXAS SOS). INFORMATION ABOUT DATA BROKER REGISTRANTS IS AVAILABLE ON THE TEXAS SOS WEBSITE AT HTTPS://WWW.SOS.STATE.TX.US/INDEX.SHTML.

Contact Us. We welcome your inquiries and comments. If you have questions about our information practices or registrations, please contact us by visiting our Contact Page or by calling us at 855-281-3915.

Changes. We may update our Privacy Statements periodically, noting the date of revision at the top. If we make any material changes in the way we collect, use, and/or disclose personal information, we will endeavor to provide you with notice before such changes take effect, such as by posting a prominent notice on our website.