The California Consumer Privacy Act 2018 (CCPA) gives consumers more control over the personal information that businesses collect about them.
The CCPA requires businesses to provide detailed privacy notices with prescribed content, including transparent disclosures about information collection and use practices, sharing of personal information, and consumers’ privacy rights.
Personal information is any information that directly identifies, relates to, describes, is reasonably capable of being associated with or could reasonably be linked, either directly or indirectly, with a particular individual or household. This includes, for example, names; aliases; unique personal identifiers (such as social security number, driver’s license number, passport number, etc.); account or user names; IP addresses; unique device or cookie identifier, biometric data; educational, professional, or employment data; behavioral data; Internet activity data; and inferences drawn about an individual based on the foregoing or online activity.
A “sale” of personal information is any disclosure of or grant of access to personal information in exchange for money or other valuable consideration. These sales are regulated by requiring businesses that sell personal information to provide consumers detailed notice and the opportunity to opt out of these sales.
Companies can be a “business,” “service provider,” or “third party.” Many companies will qualify as one or more depending on the relationship of the parties and the nature of their data processing activities. This is how Secure Code Warrior views these roles in relation to our services and associated responsibilities:
A business is a for-profit entity that (a) does business in California, regardless of whether it has any physical presence in the state; (b) processes personal information of California residents or on whose behalf such personal information is processed;(c) alone, or jointly with others, determines the means and purposes of the processing; and (d) either: (i) has more than $25 million in annual gross revenue; (ii) annually buys, sells, receives or shares for a commercial purpose the personal information of at least 50,000 consumers, whether alone or in combination with other businesses; or (iii) derives at least 50% of its annual revenue from the sale of consumers’ personal information.
A “service provider” because we process personal information on your behalf pursuant to a written agreement. The CCPA requires that this agreement limit our ability to use the personal information we process on your behalf solely to what is needed to perform the services or as may otherwise be permitted by the CCPA. We offer our customers subject to the CCPA an addendum incorporating these terms.
Companies with whom personal information is shared but which use the information for their own uses, including sharing with other parties, are “third parties.” Sharing with third parties must be disclosed in a business’s privacy policy and may constitute a ”sale” if performed in exchange for money or valuable consideration, with attendant obligations for the third party.
Secure Code Warrior does not currently meet the criteria described above for a “Business” under CCPA, namely because we do not:
However, we are considered a “Service Provider” because we process personal information on your behalf pursuant to a written agreement.
We will provide reasonable assistance to you in facilitating compliance with consumer rights requests.
We will not:
On termination, you have the option to request the return or deletion of personal information. This request must be made within 30 days of termination. We will make the data available for download by you in a machine readable format. Thereafter we will permanently delete the personal information from the live systems as described in our Privacy Policy.
Secure Code Warrior has implemented what we believe to be an industry-leading security and compliance program for our product infrastructure. Visit our Trust Center to find out more.
We will ensure that all employees, and contractors involved in the handling of personal information are aware of the confidential nature of the personal information and are contractually bound to keep the personal information confidential.
a. UNITED KINGDOM (incorporated in England and Wales)
Secure Code Warrior Limited
Company Number 08559432
Ironstone House
4 Ironstone Way
Brixworth, Northampton. NNG 9UD
United Kingdom
b. AUSTRALIA
Secure Code Warrior Pty Limited
ABN 97 608 498 639
c/o Vital Addition
5, 120 Sussex Street
Sydney. NSW 2000
Australia
c. BELGIUM
Secure Code Warrior BVBA
Baron Ruzettelaan 5
bus 3 8310 Brugge
Belgium
d. USA
Security Code Warrior Inc
265 Franklin Street, Suite 1702
Boston MA 02110
USA
e. ICELAND
Motherji ehf
Borgatun 24, 105,
Reykjavik,
Iceland
As a user of the Secure Code Warrior platform we will hold the following information about you
This personal information will be held about you for so long as you have access to our platform and thereafter for a further period of twelve (12) months or as specified in your employers contract with us (whichever is the lower).
As potential employee of Secure Code Warrior we hold the following information about you:
Should you be unsuccessful we will retain this data for a period of twelve (12) months so that we may contact you regarding any future opportunities, unless you request that we delete the data beforehand.
As an email contact or prospective customer to Secure Code Warrior we hold the following information about you:
We will retain this data for up to 7 years from our last contact with you, unless you request that we delete the data beforehand.
As a registrant, or participant in a tournament or competition we hold the following information about you:
This personal information will be held about you for so long as you have access to our platform and thereafter for a further period of twelve (12) months.
As a supplier to Secure Code Warrior we hold the following information about you:
Necessary to enable us to perform our contract with you:
Necessary for the performance of our contract with you where such communication relates specifically to our services, and legitimate interest to be able to handle such queries:
For legitimate interest to enable Secure Code Warrior to:
For legitimate interests to allow Secure Code Warrior to improve customer services offering:
To enable Secure Code Warrior to comply with a legal obligation:
With consent:
To enable Secure Code Warrior to recruit employees and assess potential candidates, that is to:
consider applications for roles for which you may have applied, directly or via a recruitment, and the negotiation of employment opportunities,
consider applicants for other roles within Secure Code Warrior for which they may be suited,
obtain references from former employers.
Necessary for the performance of a contract
For legitimate interests to enable Secure Code Warrior to conduct business
For legitimate interests to contact those who may benefit from our services
With consent
Necessary for the running of the competition and/ or tournament
With consent
for legitimate interests to enable Secure Code Warrior for the performance of a contract where the supplier is an individual
Legitimate interests to conduct business
Please see list of our data sub-processors here.
Contact us today and make software security an intrinsic part of your development process.
