Last Revised: November 21, 2025
CALIFORNIA CONSUMER PRIVACY ACT NOTICE
Pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), we are providing the following additional details regarding the categories of personal information about California residents (excluding employees, applicants, and contractors)that we collect, use, and disclose. These details supplement the information provided in our Privacy Policy.
Categories of Personal Information Collected, Disclosed, and Shared
The following chart details which categories of personal information about California residents we collect, as well as which categories of personal information we have collected and disclosed for our operational business purposes in the preceding 12 months. The chart also details the categories of personal information that we “share” for purposes of cross-context behavioral advertising, as defined in the CCPA, including in the preceding 12 months.
Categories of Personal Information | Disclosed to These Categories of Recipients for Operational Business Purposes | Shared with These Categories of Third Parties for Cross-Context Behavioral Advertising |
Identifiers, such as name, contact information, Social Security number, account information, online identifiers, and IP address | Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, , customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | Ad networks; social media platforms |
Personal information as defined in the California customer records law, such as name, contact information, and financial information | Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | Ad networks; social media platforms |
Protected Class Information, such as characteristics of protected classifications under California or federal law, such as age and national origin | Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | None |
Commercial Information, such as transaction information and purchase history | Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | Ad networks; social media platforms |
Internet or network activity information, such as interactions with our online properties or ads, and access and usage information regarding our Services | Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | Ad networks; social media platforms |
Geolocation Data, such as approximate location derived from IP address | Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | Ad networks; social media platforms |
Audio, electronic, visual and similar information, such as images and audio or video or recordings created in connection with our business activities | Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | None |
Professional or employment-related information, such as current employer and company position | Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | None |
Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics | Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | Ad networks; social media platforms |
Sensitive Personal Information.
| Our affiliated entities; third-party service providers and contractors, to facilitate services they provide to us such as data analysis, information technology and related infrastructure provision, customer support, email service, and fraud prevention; business partners to fulfill the products or services that you order; regulatory authorities and law enforcement | None |
We do not “sell” personal information, including sensitive personal information, as defined under the CCPA. Without limiting the foregoing, we do not “sell” or knowingly “share” the personal information, including the sensitive personal information, of minors under 16 years of age.
Purposes for the Collection, Use, and Disclosure of Sensitive Personal Information
We collect, use, and disclose sensitive personal information for purposes of: performing services on behalf of our business; providing goods or performing services as requested by you; ensuring security and integrity, short term transient use such as displaying first party, non-personalized advertising; order processing and fulfillment; servicing accounts and providing customer service; verifying customer information; processing payments; activities relating to quality and safety control or product improvement; securing the access to, and use of, our facilities, equipment, systems, networks, applications, and infrastructure; preventing, detecting, and investigating security incidents; resisting and responding to fraud or illegal activities; and other collection and processing that is not for the purpose of inferring characteristics about an individual. We do not use or disclose sensitive personal information for additional purposes.
Retention Period
We retain each category of personal information, including sensitive personal information, for as long as needed or permitted in light of the purpose(s) for which it was collected. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you and provide services to you, for example, for as long as you have an account with us or keep using our services, and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise;
- Whether there is a legal obligation to which we are subject, for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them; or
- Whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation or regulatory investigations.
Rights and Requests
If you are a California resident, you may request:
- That we provide you access to the following information:
- The categories of your personal information we collected and the categories of sources from which we collected your personal information;
- The business or commercial purpose for collecting or “sharing” your personal information;
- The categories of your personal information that we “shared” and the categories of third parties with whom we “shared” your personal information;
- The categories of your personal information that we disclosed for a business purpose and the categories of service providers or contractors to whom we disclosed your personal information;
- The categories of third parties to whom we disclosed your personal information; and
- the specific pieces of your personal information, including a copy of your personal information in a portable format.
- To correct inaccuracies in your personal information.
- To have your personal information deleted.
- To opt out of the “sharing” of your personal information for cross-context behavioral advertising.
You have the right not to be unlawfully retaliated against for exercising your rights under the CCPA.
We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may need to request additional personal information from you, such as contact or account information, in order to verify your identity and protect against fraudulent requests. If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing or deleting your personal information. If you make a deletion request, we may ask you to verify your request before we delete your personal information.
To make a request, please either complete the Request Form, located here, email us at privacy@nav.com, or call us at (855) 226-8388.
To request to opt out of the “sharing” of your personal information for cross-context behavioral advertising, click here.
We also process opt-out preference signals, such as the Global Privacy Control. These signals set your opt-out preferences only for the particular browser or device you are using. For information about how to use the Global Privacy Control, please visit https://globalprivacycontrol.org/.
Authorized Agents
If an agent would like to make a request on your behalf as permitted by applicable law, the agent may use the submission methods noted in the section entitled “Rights and Requests.” As part of our verification process, we may request that the agent provide, as applicable, proof concerning their status as an authorized agent. In addition, we may require that you verify your identity as described in the section entitled “Rights and Requests” or confirm that you provided the agent permission to submit the request.
De-Identified Information
Where we maintain or use de-identified information, we will continue to maintain and use the de-identified information only in a de-identified fashion and will not attempt to re-identify the information.