How We Obtain and Use Personal Information
Personal information, as used in this Notice, is any information that is used or can be used to identify, locate, or contact an individual person. Examples include first name, last name, physical address, date of birth, telephone number (landline and/or mobile), or Social Security number. As a consumer reporting agency, we sell consumer reports that include personal information to our customers with a permissible purpose to obtain this information under applicable credit reporting and data privacy laws. In addition, we use personal information to support our business functions, such as assisting consumers regarding their Innovis Credit Reports, maintaining data integrity and accuracy, fraud prevention, information security, legal support, and statistical analysis. We also collect and use other personal information in the normal course of our business operations to interact with or provide services to our prospective, current, and former customers, service providers, and vendors.
We do not engage in direct-to-consumer marketing activities. As such, we cannot process requests from consumers to opt-out of email and other direct to consumer marketing communications.
Reporting by Data Furnishers
We collect personal information about consumers from companies (“data furnishers”), such as financial institutions and other creditors as permitted under the Fair Credit Reporting Act (FCRA) and other applicable credit reporting and data privacy laws. We use this personal information to create an Innovis Credit Report that reflects the consumer’s credit history and behavior and to provide services to our customers.
Business Relationships
We collect personal information from individuals or their employers in our business (non-consumer) relationships. We use this information to maintain and service our business relationships.
Interactions With Consumers
We collect personal information through our interactions with consumers, such as when consumers contact us by submitting a form through our website, call our Consumer Assistance Department, or create an account. We collect personal information from consumers to authenticate those consumers and process their requests.
If a consumer contacts our Consumer Assistance Department by telephone, we may record and transcribe our conversations with the consumer using artificial intelligence-enabled tools. We engage customer support service providers to assist with these interactions and may furnish those providers with speech enhancement technologies to support clear communication. These technologies are applied solely to our service providers' communications and do not process or modify the consumer’s personal information. These providers are contractually required to use your information and any technologies we supply only to provide services to us.
When consumers contact us to dispute information in their Innovis Credit Report or make other requests related to their Innovis Credit Report, the personal information contained in supporting documentation provided by the consumer may be added to our database and used in future consumer reports and services to our customers.
Disclosure of Personal Information
In certain situations, we may be required to disclose personal information to third parties, such as government authorities or agencies, law enforcement agencies, or others. We may, for example, disclose personal information to third parties: (1) to comply with valid legal requirements, such as a law, regulation, search warrant, subpoena, court order, or other legal process; (2) in certain emergency cases, such as a physical threat to you or others, a threat to homeland security, or a threat to our system or network; (3) in cases in which we believe it is reasonably necessary to investigate or prevent harm, fraud, abuse, or illegal conduct; (4) to permit us to pursue available remedies or limit the damages we sustain; or (5) for any other purposes permitted by applicable law or regulation.
When our customers provide us with personal information to access our services, this personal information may be sent to our affiliates, resellers, subcontractors, or third-party technology and data vendors that assist us in providing the services.
We do not collect, use, or sell personal information to third parties, including vendors acting on our behalf, for the purpose of training large language artificial intelligence models.
We also provide services to companies for resale to their customers. Those companies are called resellers. We receive personal information from and provide services to resellers in the same way as customers; only resellers do not use our services for their own use. Instead, they pass the services along to their customers, who use the services for the same permitted purposes as our direct customers.
Website Data Collection Practices
Cookies
Cookies are small text files that a web server places on your computer or device when your browser accesses a website. Cookies store certain data specific to that website, so this information is available to us later when the browser returns to our website. A session cookie enables certain features of a website, like browsing through different pages on our website without having to log into each page. A persistent cookie stays on your browser until you delete it manually or your browser deletes it based on the duration period contained in the file of the persistent cookie.
We use strictly necessary cookies to ensure our website functions properly. These cookies allow you to perform certain actions, such as setting privacy preferences, logging in, or completing forms, and provide certain security measures to protect our website from automated or malicious attacks, fraud, and abuse. These cookies may be session or persistent cookies. Since these cookies are necessary for the operation or our website, we do not provide an option for you to opt out of these cookies.
Information Collected on Pages with Online Forms
Individuals control the personal information they send to us when completing and submitting an online request form to us. We may require individuals to provide certain personal information to submit the request. We use the information in these forms to respond to the requests.
We use certain security controls, including certain cookies, to protect our website from fraud, abuse, malicious bots, and other automated attacks. We and the vendors that provide these tools may collect and analyze certain technical and network information, including, but not limited to, the individual’s IP address, referral URL, device, browser, and operating system attributes, interaction signals, date, language settings, screen resolution, and JavaScript objects to help us distinguish legitimate activities from automated or malicious activities.
We retain this automatically collected information for operational purposes, such as investigating security incidents, running analytics to understand usage, and for compliance with security standards.
We may also use a vendor to assist us in providing online request forms. If you interact with an online request form, we and the vendors that help us maintain this form may collect and analyze certain data, as described above, and these vendors may receive your online request form. We do not use session replay or similar technologies that can replicate your actions in completing an online form before you submit that form to us, so the personal information you enter in an online form is not accessible to us or our vendor until you submit the form. If you do not wish to provide your personal information to our vendor through an online form, you may submit your request to us through other designated channels.
The vendors we use for these security controls and online forms process this information on our behalf to provide these services.
Online Tracking and Global Privacy Controls
We do not track your online activities over time or across third party websites. However, other third parties may be conducting online tracking on our website. To learn more about the choices you have regarding this online tracking, please visit these websites:
https://www.aboutads.info/choices/
Some browsers transmit "do not track" signals to the websites and other online services with which a user communicates. The Global Privacy Control (GPC) signal, which you can set on your browser, tells websites that honor the signal to stop selling, sharing, or using your personal information for cross-context behavioral advertising purposes. We do not engage in cross-contextual behavioral advertising, so we do not act in response to GPC signals.
If you click on a link on our website to follow us on LinkedIn, we may receive certain anonymized or aggregated information and other analytics regarding such click-through activities from LinkedIn.
Other Third-Party Links and Websites
You may be able to access other third party sites by clicking links on our website. We are not responsible for the privacy policies or practices of any third party websites, and if you visit those websites, we encourage you to review their respective privacy policies.
Security Measures to Protect Personal Information
The security of personal information is important to us. We have adopted security measures to protect the confidentiality of the personal information we collect and maintain about consumers and about individuals in our business-to-business relationships. Accordingly, we prohibit the unlawful disclosure of personal information and limit access to the same. We maintain an information security program that contains administrative, technical, and physical safeguards designed to protect the security and confidentiality of personal information from unauthorized disclosure in accordance with applicable credit reporting and data privacy laws and industry standards. We have implemented controls designed to ensure that access to personal information is limited to those employees, affiliates, and third parties who need to know such information to provide the services that our customers or consumers have requested or support our business functions.
Retention of Data and Disposal of Personal Information
We retain personal information for as long as it is necessary for business purposes and to provide services to our customers. At the end of its retention lifecycle, personal information is destroyed or otherwise rendered inaccessible. We take reasonable measures to protect against unauthorized access to or use of personal information in connection with our disposal of such information.
California Consumer Privacy Act (CCPA)
Business-to-Business Relationships (California Residents Only)
Business-to-Business Notice
This section of the Notice applies only to residents of California that currently have or previously had a business-to-business (B2B) relationship with us and is provided pursuant to the California Consumer Privacy Act (CCPA). This section of the Notice provides additional information about the personal information that we collect from you when you visit this website, that is provided to us by you or your employer, that we collect from you when you otherwise interact with us as an employee of a prospective, current, or former customer, service provider, or vendor, that we collect from our affiliates, and that we collect from publicly available and other third party sources.
If your current or previous employer provided your B2B personal information to us, you should also review that employer's privacy policies that may apply to this B2B personal information.
We use your B2B personal information to communicate with you, to provide or maintain the products and services we provide to our customers or receive from our vendors, for our internal business purposes, to protect our legal rights and prevent misuse of our website, to offer or provide our products and services to our prospective or current customers, and for other permissible uses. For example, you or your employer may provide us with your name and email address so we can assist you in setting up your account log-in with us.
B2B personal information is retained as long as needed for us to facilitate our business relationship with your employer, provide you or your employer with a product or service, maintain and service a B2B account for you or your employer, or assist us in our business marketing efforts.
B2B Personal Information
Under certain circumstances, we disclose your B2B personal information to our vendors, affiliates, regulators, and government or public authorities. We disclose B2B personal information to analytics providers to support our business, assist us in our business marketing efforts in providing services to our customers, and as otherwise permitted or required by law, regulation, or in our agreements with our customers.
The chart below explains the categories of information we collect, categories of third parties we disclose B2B information to and categories of third parties to whom we "sell" or "share" personal information.
| Categories of B2B Personal Information We Collect |
Categories of Third Parties to Whom We Disclose B2B Personal Information | Categories of Third Parties to Whom We Sell or Share B2B Personal Information |
|---|---|---|
| Identifiers (e.g., name, email address, telephone number) | • Government entities, regulators, and law enforcement • Affiliates • Vendors and service providers • Analytics providers |
N/A |
| Account log-in information (e.g., username, password) | N/A | N/A |
*The terms "sell" and "share" are defined under the CCPA to generally mean to sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate orally, in writing, or by electronic or other means, your personal information to a third party for monetary or other valuable consideration.
B2B Rights Under the CCPA
If you are a California resident and we have collected, used, or disclosed your B2B personal information as part of your or your employer's B2B relationship with us, you have the following rights under the CCPA regarding your B2B personal information:
Access
You have the right to request the following from us (up to twice per year and subject to certain exemptions):
• The categories of B2B personal information about you that we have collected from you;
• The sources from which we have collected that B2B personal information;
• Our business or commercial purposes for collecting, selling, or disclosing that B2B personal information;
• The categories of third parties to whom we have disclosed that B2B personal information; and
• A copy of the specific pieces of your B2B personal information we have collected.
Deletion
Subject to certain conditions and exceptions, you have the right to ask us to delete certain B2B personal information that we have collected from you. We may, for example, not be able to delete your personal information if we still need this information to provide products and services to your employer or comply with our contractual obligations to your employer.
Correction
You have the right to ask us to correct inaccuracies in the B2B personal information that we have collected from you or your employer.
Opt-Out of Sale or Share
We do not sell or share your B2B personal information to or with third parties to market their products and services to you or for their own uses. As such, we do not provide a right to opt- out of the sale or sharing of this information.
Limit Use of Sensitive Personal Information
We do not intend to collect and use personal information about you that would be considered sensitive personal information under the CCPA when you visit our website or otherwise interact with us. If such information is provided by you or your business employer, we will use such information only as necessary to provide goods and services to your employer or for other business operational purposes. As such, we do not provide an option for you to limit our use of this sensitive personal information.
Right to Non-Discrimination
We will not discriminate against you if you exercise any of these privacy rights.
How to Submit a Privacy Rights Request
If you are a California resident who currently has or previously had a B2B relationship with us and you wish to exercise one or more of the privacy rights described above, you or your authorized agent can submit a request to us by contacting us at 1-833-644-9985 (toll-free) or in writing at the address disclosed in the Contact Information section below. You may also submit a request online to us.
To submit a request to us through the channels disclosed above, please specify your request type and provide your name, the name of the applicable business, your work email address at that business, and your personal contact information. Before we fulfill an access, deletion, or correction request, we will verify your current or previous business relationship with us.. To protect the confidentiality and security of your personal information and to ensure we receive your inquiry, please do not submit your inquiry to us by email.
You may give someone else permission to exercise these rights for you. We will need proof, such as a Power of Attorney form or other similar signed document, affirming that you have asked someone else to make a request on your behalf.
Children's Privacy
Our website is not directed at children. We do not knowingly collect information directly from individuals under the age of 18. Consumers under the age of 18 should not send any personal information to us. Parents or guardians of minor children, however, can contact us and provide personal information regarding the minor child to, for example, create a credit record that can be frozen to help prevent fraudulent activity against that minor child.
International Residents
We control and operate this website from the United States. Our website and this Notice are not directed at residents of countries other than the United States and this website is not intended to subject Innovis to the laws or jurisdiction of any country or territory other than that of the United States. We limit the availability of this website, in whole or in part, to any person, geographic areas, or jurisdiction we choose at any time and in our sole discretion.
Changes to this Notice
If we make changes to this Notice, we will post the revised Notice and its effective date on this website. The effective date is the date that we last published this notice to our website. Your use of our website after changes have been posted affirms your acceptance of the revised Notice.
Contact Information
If you have questions regarding this Notice or our privacy practices, you may contact us at:
Innovis
Attn: Privacy Office
P.O. Box 530065
Atlanta, GA 30353-0065
Toll-free Telephone Number: 1-833-644-9985
To protect the confidentiality and security of your personal information and to ensure we receive your inquiry, please do not submit your inquiry to us by email.