RegMadeEasy's Notice about the California Consumer Privacy Act (CCPA)

Effective as of: January 1, 2020

Your California privacy rights
The California Consumer Privacy Act of 2018, (Cal. Civ. Code §1798.100 et seq., as amended, "CCPA") gives California residents rights and control over their personal information. Peak Software, LLC ("Peak", "Company", "We", "Our" or "Us") provides this statement to those residents ("You or "Your") in accordance with requirements under the CCPA to make certain disclosures about the collection and processing of their personal information, including, but not limited to, the use of RegMadeEasy software ("Software", "Site").

Subject to certain limitations, if you are a California resident, the CCPA gives you the following rights over your information:

• For the period covering the 12 months preceding your request, you may request that we disclose to you the categories and specific pieces of information collected about you, the categories of sources from which we collected that information, and the purposes for which your information was collected.
• You may request that we delete information we collected from you.
• You have the right not to be discriminated against for exercising these rights over your information.

We do not sell your personal information
Under the CCPA, a business that sells California residents' personal information to others:

1. must give notice to California residents before selling their personal information to others
2. must provide California residents the right to opt out of the sale of their personal information

Peak Software does not sell personal information, including personal information of anyone under 16 years old. Thus, these notification and opt-out requirements do not apply to Peak Software or RegMadeEasy.

What information do we collect?
As part of providing products and services to you, we may collect information, including personal information, about you or your business when you use our services.

Personal information is data that can be used to identify you individually. The information we may collect includes, but is not limited to:

• Information You Give Us
  You do not have to give us any personal information to browse the Site. However, you may be asked to provide personal information to submit or request information from us, or to use the services offered through the Site. To RSVP for an event will require at least your full name and email address. To register for an event, you typically will be required to provide additional information. Depending upon the services requested and the nature of the event, you may need to provide additional information from any combination of the following categories:
  • Information required for air travel by the Transportation Security Administration (TSA), such as full legal name, date of birth, and gender.
  • Payment card information for payments or to guarantee transportation and/or hotel accommodations.
  • Contact information, which may include home and/or business address, phone number, etc.
  • Professional information required by your company, such as job title, department, employee ID, and manager's name.
• In addition, some information about special travel arrangements, notices, or preferences that you provide us may reveal certain medical conditions or reflect philosophical or religious beliefs. Examples include:
  • Medication, medical equipment, notices, and other information may concern your medical condition, such as requests for wheelchair assistance due to a medical disability.
  • Dietary requirements, allergies, or preferences which may reveal health and/or medical information or information regarding religious or philosophical beliefs.
• Automated Information Collection
  We do not use tracking technologies to passively collect information about you. We do not allow third parties to collect personal information about your online activities over time and across different websites when you use the Site.

With whom do we share your information?
We do not sell, rent, trade, or otherwise share personal information collected through the Site, except as described below:

• Subsidiaries and Affiliates. We may share personal information with our subsidiaries and affiliates for the purposes for which you provided the information or as reasonably necessary for our internal administrative and business purposes.
• Service Providers. We work with third parties that provide services on our behalf. Such services may include third party travel, booking and related technology services, expense management services, website/database hosting, and online merchant services. We may share personal information and non-personal information with these third parties for the purpose of enabling them to provide these services. We require them by agreement to meet the same privacy and security standards we impose on our own data storage and maintenance.
• To procure products and services for you. In order to procure products and services specifically requested by you from third parties as part of our services, we may provide, as necessary, your personal information, such as your name, email address, account password, payment card number, and personal preferences (such as seating preferences), and other personal information required by the Transportation Security Administration (TSA) to such third parties just as you or your assistant would if you directly procured those products and services yourself. We share this information only as necessary and required to process your procurement request on your behalf. As an example, if you wanted to book or change a flight using our corporate travel services, we would share with the airline or travel booking agency your name, phone number, billing address, and payment card information as well as any other required information. We may also share personal information with our customer in connection with our services. Please note that we do not take any responsibility for the conduct of these product and service providers (such as airlines, hotels, or rental car companies) or your employer in their use or disclosure of personal information after they have received it. Their use of such information is governed by their own separate privacy policies. If you are concerned about the manner in which these product and service providers use or disclose your personal information, you should review their privacy policies prior to such use.
• Consent. We may share personal information in accordance with any consent or instructions you provide.
• Required by Law. We may disclose personal information or any information collected through the Site if we are required to do so by law or pursuant to legal process, in response to a request from government officials or law enforcement authorities, or as necessary or appropriate in connection with an investigation of fraudulent conduct, illegal activity, or other activity constituting a threat to the security of our systems or the data stored in them.
• Certain Transactions. We may disclose or transfer personal information or any information collected through the Site to third parties who acquire all or a portion of Company's business, whether such acquisition is by way of merger, consolidation, or purchase of all or a portion of our assets, or in connection with any bankruptcy or reorganization proceeding brought by or against us.

Right to say no to the sale of your personal information
As explained above, the CCPA requires businesses that sell personal information to allow California residents the ability to opt out of the selling of their information. Again, Peak Software and RegMadeEasy do not sell personal information, thus these notification and opt-out requirements do not apply.

Requesting disclosure or deletion of your information
California residents may make a request pursuant to their rights under the CCPA by emailing groups_sanjose@dt.com or calling us toll-free at 1 (800) 366-0455. When receiving a request, we will verify that the individual making the request is the resident to whom the personal information subject to the request pertains. Government identification may be required.