Privacy Policy

COAST BENEFITS, INC. (“Coast,” “us,” “we,” or “our”) makes all reasonable efforts to protect the privacy and security of the data shared with us. Please read our Privacy Policy to understand how we will collect, use, disclose and protect information about you.

Scope of Privacy Policy:

Coast provides information for participants of the Trust Funds we administer regarding its Services. At times, the Coast website and/or application may redirect members to other affiliated websites.

This Privacy Policy describes how and when we collect, use and share your information across our website, SMS, APIs, email notifications, applications, and our other covered services that link to this Policy (collectively, the “Services”). For example, you provide us information when you send us information when you use our Services on the web or when you register for and provide your personal information to us. When using any of our Services, you consent to the collection, transfer, sharing, storage, disclosure, and use of your information as described in this Privacy Policy. This includes any information you choose to provide that is deemed sensitive under applicable law.

This Privacy Policy applies to the Coast Website and the use of Services. By using the Website and Services you consent to the privacy practices described in this Privacy Policy.

When this policy mentions “we” or “us,” it refers to the controller of your information under this policy, Coast. Despite this, you alone control and are responsible for providing and sharing your information.

You authorize us to transfer, share, store, and use your information in the United States and Canada, and any other country necessary for Coast to conduct its business. In some of these countries, the privacy and data protection laws and rules regarding when government authorities may access data may vary from those in the country where you live.

This Privacy Policy does not apply to information about you collected: (i) by third party services, applications or websites, or advertisements associated with, linked to or otherwise accessible from the Website; or (ii) by third party individuals, district councils, local unions, retailers, financial institutions or other firms or companies with which you conduct transactions or communications facilitated and/or confirmed through use of the Services (“Third Party Transactions”). The information collected and received by such third parties is subject to their privacy policies and under no circumstance is Coast liable for the third party’s compliance therewith. You should review the privacy policies of third parties with whom you conduct or engage in Third Party Transactions. NOTHING HEREIN PROHIBITS COAST FROM SHARING THE INFORMATION YOU PROVIDE TO COAST.

Collection, Use and Disclosure of Information:

We may collect information from or about you in a number of ways, including: (i) when you give it to us; (ii) when you give us permission to obtain it; (iii) when we obtain it from other sources; and (iv) automatically when you use our Services.

Visiting Our Website:

Coast and our third-party service providers may automatically collect information from visitors to our Website, including individuals who do not register as members, the following information:

Your Internet protocol (IP) address;
The web page from which you entered our Website;
The type of web browser or operating system you are using;
The name of your internet provider; and
Your activity while using the Website (including access times, new and repeat visit information, which of our web pages you visit, how long you spend on each page, and exit page information).

Using Our Services:

We can obtain your personally identifiable information (“Personal Information”) when you provide us by using an online form on the Coast Website through the general use of the Website. The Personal Information we collect can include the following:

Name
Mailing address
Member identification number
Email address
Telephone number
Social Security Number
Beneficiary Information

Use of Services without a Member Profile:

We receive information when you view content on or otherwise interact with our Services (“Log Data”). Some of our Website features do not require you to create an account. For example, when you visit our Website, sign into our Services, interact with our email notifications, use your account to authenticate to a third-party website, application, or service, or visit a third-party website, application, or service that includes Coast content, we may receive information about you. This Log Data may include your IP address, browser type, domain names, access times, referring website addresses, or cookie information. We also receive Log Data when you click on, view or interact with links on our Services, including links to third-party applications. We keep Log Data as needed for the purposes described in this Privacy Policy as long as necessary to provide the Services to you and our members, subject to any legal obligations to further retain such information.

Third-Parties and Affiliates:

We may receive and share information about you from third parties. We use certain third parties to support the Coast Website. We may also collect Personal Information from third-parties if they receive a notification that your account information in our database is inaccurate and needs to be changed.

How We Use and Disclose Personal Information Collected When You Visit Our Website:

Coast will not sell and/or rent your Personal Information provided to Coast. Coast may share Personal Information with affiliated entities, district councils, and/or local unions. Further, we may share your Personal Information with our Service Providers (any person or company with whom we have entered into a legal arrangement for joint provision of or shared responsibility for provision of the Website or Services we provide) or business associates who assist us in administering our Website or Services. Accordingly, we may use and disclose Personal Information collected when you visit our Website or use our Services for certain purposes, including:

To contact our participants;
To notify our participants about our Services;
To verify changes you have made to your Personal Information;
To facilitate your registration on our Website and to resolve issues relating to your Coast participant data;
To resolve a problem related to a transaction related to our Services;
To verify your identity;
To test, correct and improve our content and services;
To analyze how the Website is being accessed and used;
To improve the Website’s performance and delivery;
To customize your user experience;
To develop new products and services;
To comply with applicable laws and legal requirements (e.g. subpoena, court order, etc.);
If it is necessary to allow our service providers or agents to provide services for us (such service providers or agents being required to maintain the confidentiality of your information with equal or greater protections than those provided by us);
If it is necessary in connection with other business purposes including, without limitation, customer care, service quality, business management and operation, risk assessment, security, fraud and crime prevention/detection, monitoring, research and analysis, marketing and dispute resolution;
If it is necessary as part of a merger, divestiture or acquisition; and /or
If it is necessary for us to provide it to our attorneys, accountants, regulators, auditors or other advisors.

Coast may use and disclose automatically collected internet data primarily for purposes of administering, testing, protecting and improving our Website or Services or any other Service we provide, analyzing how the Website or Services is being accessed and used, to better understand the preferences of our visitors and members, identifying server problems, measuring effectiveness of our communications and success of our information campaigns, and personalizing your experience on our Website or Services.

Service Providers:

We engage service providers to perform functions and provide services to us in the United States. For example, we use a variety of third-party services to help provide our Services, and to help us understand and improve the use of our Services. We may share your Personal Information with such service providers subject to obligations consistent with this Privacy Policy and any other appropriate confidentiality and security measures, and on the condition that the third parties use your private personal data only on our behalf and pursuant to our instructions.

Non-Personal, Aggregated, or Device-Level Information:

We may also create or compile aggregated and de-identified data, which is data that is derived from various sources, including accounts and transactions. This information, which does not identify individuals, is used by Coast for its business purposes, which may include offering services, research, and other purposes consistent with applicable laws.

We may, however, share non-personal, aggregated, or device-level information through partnerships with entities that may use data in their possession (including data you may have given them) to link your name, email address or other personal information to the information we provide them. You can control whether Coast shares your information under these partnerships by changing your user settings.

We may share or disclose your information at your direction to access your account or when you direct us to, to perform our services and assist affiliated entities of Coast or other affiliated entities.

Disclosure Pursuant to Law, Regulation, Legal Process, or Governmental Request:

Notwithstanding anything to the contrary in this Privacy Policy, we may preserve or disclose your information if we believe that it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to protect the safety of any person; to address fraud, security or technical issues; or to protect our or our users’ rights or property. However, nothing in this Privacy Policy is intended to limit any legal defenses or objections that you may have to a third party, including a government’s request to disclose your information.

Business Transfers and Affiliates:

This Privacy Policy will apply to your information as transferred to Coast. However, any data collected by your local union is also subject to the privacy policy of that entity. We may also disclose information about you to other affiliates in order to help provide, understand, and improve our Services and our affiliates’ services.

Additional Information:

Not for Children

Our Website and Services are not intended for children and we do not knowingly collect information from children under the age of 18. If you have reason to believe that we collected or are in possession of Personal Information from someone under 18 years of age, please let us know.

If you are under 18, please do not attempt to register for the Website or Services or send any information about yourself to us. By using the Website or using the Services, you represent that you are 18 years of age or older.

Do Not Track

Our Website does not respond to “Do Not Track” signals. We do not collect personally identifiable information about your online activities over time and across third party websites or online services nor do we allow other parties to do so.

Our Security Safeguards:

We take reasonable measures to safeguard your information, including technical, administrative and physical security controls to protect from unauthorized access, disclosure, or use. We use encryption technologies to protect data. We review our strategies and update as necessary to meet our business needs, changes in technology, and regulatory requirements. However, despite even our best efforts, the security of data transmission over the Internet cannot be completely guaranteed. You should always take precautions regarding how you handle and disclose your personal information and should avoid sending it through unsecure channels.

Linking to Third Party Websites

We may provide links to websites that are owned or operated by other third party companies and entities. When you use a link from the Website to visit a third party’s website, you will be subject to that website’s privacy policy/notice, which may be different from ours. You should carefully read the policies of the websites you visit. We are not responsible for the privacy practices of any websites that are not owned or operated by us.

We may keep track of how you interact with links across our Services, including our email notifications, third-party services, and member applications, by redirecting clicks or through other means. We do this to help improve our Services, to provide more relevant advertising and to be able to share aggregate click statistics such as how many times a particular link was clicked on.

Reviewing and Updating Your Information:

Keeping your Coast profile information, Personal Information, and email addresses/mobile numbers, accurate and up-to-date is very important. If your member profile information is incomplete, inaccurate or not current, please update your information by emailing, calling or corresponding in writing with Coast.

International Users:

Our Website and Services are intended for U.S. and Canadian audiences. If you visit or use the Website or use the Services, your information may be transferred or processed within the United States to a jurisdiction in which the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen. By accessing the Website or using our Service, you acknowledge and agree that we may collect, process, store, use, disclose, and dispose of your personal information in accordance with the terms of this Privacy Policy.

Privacy Policy Changes:

We may revise this Privacy Policy from time to time. The most current version of the policy will govern our use of your information and will always be on our Website. If we make a change to this Policy that, in our sole discretion, is material, we will notify you via an email to the email address associated with your account. By continuing to access or use the Services after those changes become effective, you agree to be bound by the revised Privacy Policy.

Entire Agreement:

This Privacy Policy makes up the entire agreement between the parties regarding Coast’s privacy policies and supersedes any prior agreements. If any portion of this Privacy Policy is found to be unenforceable, the remaining portion(s) will remain in full force and effect. Failure to enforce any of this Privacy Policy will not be considered a waiver. Any amendment to or waiver of this Privacy Policy must be made in writing and signed by us. You will not transfer any of your rights or obligations under this Privacy Policy to anyone else without our consent. All of our rights and obligations under this Privacy Policy are freely assignable by us in connection with a merger, acquisition, sale of assets, operation of law, or otherwise. Nothing in this Privacy Policy shall prevent us from complying with the law. This Privacy Policy does not confer any third-party beneficiary rights. We reserve all rights not expressly granted to you.

Choice of Law:

This Privacy Policy will be governed by and construed under the laws of the State of California, excluding only its conflict of law provisions. By using the Coast Website and Services, you hereby submit to the exclusive jurisdiction of the courts within the State of California and waive any jurisdictional venue or inconvenient forum objections to such courts. You further agree to comply with any applicable federal, state and local laws in your use of the Services.

How to Contact Us:

If you have any questions regarding this Privacy Policy, please contact us at the information provided below. We will keep a copy of your message until we have had an opportunity to address your concerns. We may archive your message for a certain period of time or discard it, but your email address will not be used for any other purpose.

FOR INDIVIDUALS BASED IN CALIFORNIA AND OTHER CERTAN STATES

This Privacy Policy provides additional specific information for consumers as defined by the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act (“CPRA”). This Policy is a supplement to other Privacy Policies issued by Coast. In the event of a conflict between any other Coast policy, statement, or notice and this Policy, this Policy will prevail as to California Consumers and their rights under the CCPA and CPRA.

In accordance with the CCPA’s and CPRA’s requirement, this Policy describes our collection, use, disclosure of California Consumers’ “Personal Information” or “PI” as defined by the CCPA and CPR, as well as the rights California Consumers have under the CCPA and CPRA. Terms defined in the CCPA and CPRA that are used in this Policy have the same meanings as the CCPA and CPRA.

The following rights are also available to residents of the following states:

The Right to Opt out of Certain Processing: Colorado, Connecticut, Virginia
The Right to Opt In for Sensitive Data Processing: Colorado, Connecticut, Virginia
The Right Against Automated Decision Making: Colorado, Connecticut, Virginia

Disclosure of Personal Information, No Sale:

Coast has not sold Personal Information (as defined or in contemplated by the CCPA or CPRA) in the preceding twelve (12) months. As defined and contemplated by the CCPA and CPRA, Coast does not sell Personal Information of minors under the age of sixteen (16).

California Consumer Privacy Rights:

As a California Consumer, you have the following rights:

Right to Disclosure: California Consumers have a right to request information from us regarding the Personal Information we collect and disclose for business purposes about you, the consumer.
Right to Deletion: In certain circumstances, you have the right to request we delete Personal Information we collected from you.
The Right to Correct Inaccurate Personal Information
The Right to Limit Use and Disclosure of Sensitive Personal Information The Right Against Automated Decision Making

Collection and Use of Personal Information

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”).

The following is a description of our data collection practices, including the personal data we may collect, the source of that information, the purposes for which we collect information (in addition to as otherwise set forth herein), and whether we disclose that information to external parties. We may use any and all of the information for any purposes described in this Privacy Policy. We may not collect additional categories of personal information or se personal information collected for additional purposes that are incompatible with the disclosed purposes for which the personal information was collected, without providing consumers with notice.

Our collection, use, retention, and sharing of a consumer’s personal information shall be necessary and proportionate to achieve the purposes for which such information is collected or processed, or for another purpose that is compatible with the context in which the personal information was collected, and not further processed in a manner that is incompatible with those purposes.

We may not retain a consumer’s personal information or sensitive personal information for each disclosed purpose for which the personal information was collected for longer than is reasonably necessary for that disclosed purpose.

We collect personal information directly from you, from your browser or device when you visit our Website, from third parties that you permit to share your information or from third parties that share public information about you, as stated above.

See the section above, “How We Use Personal Information” to understand how we use personal information collected from California consumers. Below is a list of categories of personal information we have collected in the past twelve (12) months:

PERSONAL IDENTIFIERS

We collect your name, address, email address, zip code, telephone number, date of birth, phone number, and other similar personal identifiers when you create an account with us, or it is provided to us. We use this information to provide our Services, as well as to respond to your requests.
We collect your IP address automatically when you use our Services. We use this information to identify you, gauge online activity, and measure the effectiveness of online services, applications, and tools.
We collect your Device ID automatically when you use our Services. We use this information to monitor your use and in furtherance of providing our Services to you.
Other personal information, such as personal information you provide to us in relation to a survey, comment, question, request, article download or inquiry and any other information you upload to our application.

CUSTOMER RECORDS INFORMATION AND PERSONAL DATA PROTECTED AGAINST SECURITY BREACHES (CAL CIV. CODE § 1798.80(E))

We collect your name, phone number, username, password, company name, job title and business email address when you create an account with us or provide to us. We use this information to provide our Services and to respond to your requests.
We may collect your Social Security Number to provide you with the Services.

PROTECTED CLASSIFIED INFORMATION

We collect information about your age and date of birth when you provide information to us. We use this information to provide you with the Services.

COMMERCIAL INFORMATION

When you engage with us, we create records of your interactions with us, and the Services We use this information to measure the effectiveness of our Services and use this information to better calibrate our assessment tool.

BIOMETRIC INFORMATION

We do not collect any biometric information about you

INTERNET OR OTHER SIMILAR NETWORK ACTIVITY

We collect information regarding your interaction with our Website. This includes device(s) used to access the services and information regarding your interaction with our Website or Services and other usage data.

GEOLOCATION

As described above, we collect your IP address automatically when you use our Site. We can determine your general location based on the IP address, but not your precise geolocation. We do not collect data related to your precise geolocation.

AUDIO/VIDEO DATA

If you contact us via phone, we may record the We will notify you if a call is being recorded at the beginning of the call. We may collect sensory information, the content, audio and video recordings of conference calls between you and us that we record where permitted by you and/or the law. We do not collect thermal, olfactory, or similar information.

PROFESSIONAL OR EMPLOYMENT RELATED INFORMATION

We collect business information, including your name, company and job title, and business contact details from We use this information to reach out to you in furtherance of the provision of our Services.

We share personal information with third parties for business purposes. The categories of third parties to whom we disclose your personal information may include: (i) our service providers and advisors, (ii) strategic partners; and (iii) analytics providers.

When we disclose personal information for a business purpose, we enter into a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except in performance of the contract. The CCPA and CPRA prohibit third parties who receive the personal information we hold from selling it unless you have received explicit notice and an opportunity to opt out of such downstream sales.

Either we or our Service Providers may use your information for the following Business Purposes (as defined in the CCPA and CPRA) on a day- to-day basis.

Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that
Debugging to identify and repair errors that impair existing intended
Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.

Undertaking internal research for technological development and demonstration.

Do We Sell or Share Your Personal Information?

A mentioned above, we do not sell your personal information as currently defined under the CCPA and as amended by the CPRA, meaning that we do not rent, disclose, release, transfer, make available or otherwise communicate your personal information to a third party for monetary or other consideration. We will not sell your information unless we modify this Privacy Policy and take the additional steps required under the CCPA.

While we do not sell Personal Information for monetary value, we may share it with a third party or disclose it to a service provider or contractor in furtherance of a business purpose. In accordance with the CPRA, you have the right to opt-out of Coast sharing or otherwise disclosing your personal data. If you choose to opt- out of Coast sharing your data, you can do so by emailing us at: compliance@coastbenefits.com.

If we do share your Personal Information with a third party, Coast shall enter into an agreement with such third party, service provider, or contractor that : (1) specifies that the personal information is disclosed by Coast only for limited and specific purposes; (2) obligates the third party, service provider, or contractor to comply with applicable obligations under the CPRA and obligates those persons to provide same level of privacy protection as required by he CPRA; (3) grants Coast rights to take reasonable and appropriate steps to help ensure that the third party, service provider, or contractor uses the personal information transferred in a manner consistent with Coast’s obligations under the CPRA; (4) requires the third party, service provider, or contractor to notify us if it makes a determination that it can no longer meet its obligations under the CPRA; and (5) grants Coast the right, upon notice, including under (4), to take reasonable and appropriate steps to stop and remediate unauthorized use of Personal Information.

Under the right to delete provision of the CPRA, Coast will enter into an agreement with a third party that (1) the service provider or contractor shall cooperate with Coast in responding to a verifiable consumer request and (2) that at the direction of Coast, shall delete, or enable Coast to delete and shall notify any of its service providers or contractors to delete personal information about the consumer collected, used, processed, or retained by the service provider or the contractor.

Additionally, the service provider or contractor shall notify any service providers, contractors, or third parties who may have accessed personal information (requested for deletion) from or through the service provider or contractor, unless the information was accessed at the direction of Coast, to delete the consumer’s personal information, unless doing so proves impossible. A service provider or contractor shall not be required to comply with a deletion request submitted by the consumer directly to the service provider or contractor to the extent that the service provider or contractor has collected, used, processed, or retained the consumer’s personal information in its role as service provider or contractor to Coast.

How Long Do We Keep Your Data?

For each of the categories of personal data, below please find information regarding how long we keep such data or how we will decide to dispose of such data.

Personal Identifiers: We collect this data as provided by you to us, and we utilize this data in furtherance of providing Services to you. We keep this data for as long as it’s needed to provide Services to you, or as may be required under applicable law and will decide to dispose of this data when it is no longer needed to achieve our business-related purposes.
Customer Records Information: We collect this data when you create an account with us and use it to provide Services to you. We keep this data for as long as it’s needed to provide Services to you, or as may be required under applicable law and will decide to dispose of this data when it is no longer needed to achieve our business-related purposes.
Protected Classified Information under California Law: We collect information about you, your age and date of birth when you contact us or if you provide this information to us. We keep this information as long as it is needed to provide Services to you, or as may be required under applicable law and will decide to dispose of this data when it is no longer needed to achieve our business-related purposes.
Commercial Information: When you create an account or otherwise engage with us via our Website or app, we create records of your interactions with us and the Services provided. We utilize this information to measure the effectiveness of our Services. We keep the data for as long as it’s needed to provide Services to you, or as may be required under applicable law, and will decide to dispose of this data when it is no longer needed to achieve our business-related purposes.
Biometric Information: Coast does not collect any biometric data.
Internet and other electronic network activity: We collect information regarding your interaction with our Website. This includes device(s) used to access the Website and information regarding your interaction with our Website or in the provision of our Services to you. We keep this data for as long as it’s needed to provide Services to you, or as may be required under applicable law, and will decide to dispose of this data when it is no longer needed to achieve our business-related purposes.
Geolocation Data: As described above, we collect your IP address automatically when you use our Site. We can determine your general location based on the IP address, but we do not and cannot determine your precise geolocation. We keep this data until we determined that it is no longer needed to achieve our business-related purposes, or as may be required under applicable law, and will decide to dispose of this data when it is no longer needed to achieve our business-related purposes.
Audio, Electronic, Visual, Olfactory, or Similar Information: If you contact us by phone, we may record the call. We will notify you if a call is being recorded at the beginning of such a call. We may collect the content, audio and video recordings of conference calls between you and us that we record where permitted by you and/or by law. We keep this data for as long as it’s needed to provide Services to you, or as may be required under applicable law, and will decide to dispose of this data when it is no longer needed to achieve our business-related purposes. We do not collect thermal, olfactory, or other similar information.
Professional or Employment-Related Information: We collect business information, including your name, company, job title, and business contact details from you which you provide to us. We use this information in furtherance of our Services. We keep this data for as long as it’s needed to provide Services to you, or as may be required under applicable law, and will decide to dispose of this data when it is no longer needed to achieve our business-related purposes.

DO WE USE YOUR DATA FOR AUTOMATED DECISION MAKING?

We do not use your data for automated decision making (i.e. data profiling) purposes.

HOW TO EXERCISE YOUR RIGHTS UNDEDR THE CCPA/CPRA

Under the CCPA and CPRA you have the right to find out about the personal information that we have collected and how that information has been used or disclosed. You also have the right to request that we delete or correct your personal information (and/or opt-out of the sale or sharing of your personal information).

If you wish to exercise any of these opt-out rights, or if you would like additional information, please contact us at the following email address: compliance@coastbenefits.com, mail to: Coast Benefits, Inc., 3530 Camino del Rio North, Suite 110, San Diego, CA 92108 or call us at the following telephone number: 619-280-2009.

1. Right to Access and Know About Personal Information Collected, Disclosed, or Shared

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

The categories of personal information we collected about you.
The categories of sources for the personal information we collected about you.
Our business or commercial purpose for collecting that personal information.
The categories of third parties to whom we disclose that personal information.
The specific pieces of personal information we collected about you (also called a data portability request).
If we disclosed your personal information for a business purpose, identifying the personal information categories that each category of recipient obtained.

For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

2. The Right to Request Deletion of Your Personal Information by Coast and Third Parties

Subject to certain exceptions, you have the right to request that we delete any or all of your personal information that we collected from you and retained over the past twelve (12) months. Please bear in mind that deletion of your personal information may not allow Coast to continue to provide the Services to you. Once we receive and confirm your verifiable consumer request, we will delete (and direct our servicer providers or contractors to delete) your personal information from our records, unless an exception applies. Additionally, upon receiving a verifiable consumer request, we will notify all third parties to whom Coast has shared such personal information to delete the consumer’s personal information, unless doing so is proven to be impossible or involves disproportionate effort. You may request that only a portion of your information be deleted.

We may deny all or part of your deletion request if retaining the information is necessary for us or our service providers to:

Complete the transaction for which we collected the personal information, provide, a service that you requested, take actions reasonably anticipated based on our ongoing business relationship with you, or otherwise perform our agreement with you.
Help to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for those purposes.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech or ensure the right of another consumer to exercise their right of free speech or other right provided for by law.
Engage in public or peer reviewed scientific, historical, or statistical research that conforms or adheres to all other applicable ethics and privacy laws, when the business’s deletion of the information is likely to render impossible or seriously impair the ability to complete such research, if the consumer has provided informed consent.
To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business and compatible with the context in which the consumer provided the information.
Comply with a law or a legal obligation.

Coast may maintain a confidential record of deletion requests solely for the purpose of preventing the personal information of a consumer who has submitted a deletion request from being sold, for compliance with other laws, or for other purposes solely to the extent permissible under the CPRA.

3. The Right to Opt-Out of the Sharing of Your Personal Information.

“DO NOT SELL OR SHARE MY INFORMATION”

The CCPA and CPRA provide you with the right to opt out and stop businesses from selling or sharing your personal information. This right applies to all California consumers ages 16 and older and may be exercised at any time.

The right to opt out of sharing personal information includes sharing with a third party even when there is no exchange of consideration between the parties. This can include the right to opt out of Coast using technologies like cookies or pixels to track you across other websites, apps, or services that then share that information with ad networks to deliver targeted advertisements to you.

If you are 16 years of age or older, you have the right to direct us to not share your personal information at any time (the “right to opt-out”). Our website and products are not intended for minors. We do not sell or share the personal information of consumers we actually know are less that 16 years of age, unless we receive affirmative authorization to sell or share (the “right to opt-in”) from either the consumer who is at least 13 but not yet 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to personal information sharing may opt-out of future sharing at any time.

How to Exercise This Right:

By contacting Coast at the following telephone number: 619-280-2009; or
By sending an email to the following address: compliance@coastbenefits.com, providing specific details of your request.

Do Not Track. We do not track our customers over time and across third party websites to provide targeted advertising and therefore we do not respond to Do Not Track (“DNT”) signals.

4. The Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA or CPRA rights, and will not engage in the following behaviors:

Denying you services
Charging you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties.
Providing you with a different level or quality of services.

When you exercise these rights and submit a request to us, we will verify your identity by asking for information about your relationship with Coast such as an email address on file or other methods of verification as allowed under the CCPA and CPRA.

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

5. The Right to Correct Inaccurate Personal Information

You shall have the right to request that we correct any inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information. If Coast collects your personal information we shall disclose, pursuant to the CPRA, Section 1798.130, your right to request correction of inaccurate personal information, which you may do by contacting us at the following email address: compliance@coastbenefits.com. Mail to: Coast Benefits, Inc., 3530 Camino del Rio North, Suite 110, San Diego, CA 92108. Or by calling us at the following number: 619-280-2009.

If Coast receives a verifiable consumer request to correct inaccurate personal information, we shall use commercially reasonable efforts to correct the incorrect personal information, as directed by pursuant to your rights under the CPRA. We shall also ask any third parties and service providers to whom information has been shared with to correct or delete our personal information upon your request.

6. The Right to Limit Use and Disclosure of Sensitive Personal Information

For purposes of the CPRA, sensitive personal information includes the following personal information:

Any communications that you have with a third party.
Coast does not collect any data related to communications you have with a third-party.

Biometric data processed to identify an individual.

Coast does not collect any biometric data.

Data about sexual orientation or sex life

Coast does not collect any information regarding sexual orientation or sex life.

Financial account details in a combination (e.g. card number and password) that gives our providers access to an account.

Coast does not collect any of this data related to financial accounts.

Genetic Data

Coast does not collect any genetic data.

Government-issued numbers (such as a social security number or a number on a passport, or driver’s license number).

Yes, Coast does collect driver’s license numbers and passport numbers in certain circumstances. Coast also collects SSNs via employer contribution files.

Health Data

Coast does not collect health data.

Philosophical or Religious Beliefs

Coast does not collect any information related to philosophical or religious beliefs.

Precise Geolocation

Coast does not collect any data related to precise geolocation.

Union Membership

Coast does collect information about union membership. We keep this data for as long as it’s needed to provide Services to you, or as may be required under applicable law, and will decide to dispose of this data when it is no longer needed to achieve our business-related purposes.

Please note that any information that is already publicly available shall not be considered SPI or personal information.

With regard to any of the data from the above-listed categories which Coast does collect, Coast utilizes the data in furtherance of providing Services to you, and will keep the data for as long as it’s needed to provide Services to you, or as may be required under applicable law, and we will decide to dispose of this data when it is no longer needed to achieve our business-related purposes.

Our use and disclosure of your SPI is limited to those uses which are necessary to perform the Services reasonably expected by an average consumer who requests such Services, including the following Services:

To ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for security and integrity.
To debug to identify and repair errors that impair existing intended functionality.
To perform services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business or
Undertaking activities to verify or maintain the quality or safety of a Service or device that is owned, manufactured for, or controlled by Coast and to improve, upgrade, or enhance the Service or device that is owned, manufactured for or controlled by Coast.

Coast only uses the above-listed SPI to provide the Services. As such, the use of your SPI is already limited to uses in furtherance of the provisions of our Services to you, as we do not use it for other Non-Services related purposes. As such, since use of your SPI is already limited to the provisions of the Services to you and not used for any other purpose, your right to limit the use of your SPI to the provision of Services is already attained and exercised.

7. Right Against Automated Decision Making

Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you. We do not foresee that any decisions will be taken about you using automated means, however we will notify you if this position changes.

Authorized Agents:

You may authorize a natural person, or a business entity registered with the California Secretary of State to act on your behalf to make a request to know or to delete your personal information.

To do so, you must (i) verify your identity to Coast and provide that authorized agent written permission to make such a request or (ii) provide the authorized agent with power of attorney pursuant to the California Probate Code sections 4000 to 4465.

The authorized agent must include those authorizations in the verifiable consumer request.

Security Procedures:

Coast shall implement reasonable security procedures and practices appropriate to the nature of the personal information collected about a consumer to protect the personal information from unauthorized or illegal access, destruction, use, modification, or disclosure.

Timeframe for Disclosure:

If a consumer requests disclosure of required information, a consumer’s right to request the required information beyond a twelve (12) month period, and a business’s obligation to provide such information, shall only apply to personal information collected on or after January 1, 2022.

Children 16 and Under:

We do not knowingly collect, solicit, or share personal information from children under the age of 16. If we have knowledge that a child under 16 has submitted personal information in violation of this Policy, we will delete that information as soon as possible. If you believe we may have obtained information in violation of this Policy, please email us at the following address: compliance@coastbenefits.com or call the following telephone number: 619-280- 2009.

Questions About the CPRA?

If you have questions or concerns regarding this statement, you should first contact us via email at compliance@coastbenefits.com.

Changes to this Privacy Policy:

We reserve the right to amend this Privacy Policy at our discretion and at any time. When we make changes to this Privacy Policy, we will post the updated Policy on the Website and update the Policy’s effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes. If we are required by applicable data protection laws to obtain your consent to any material changes before they come into effect, then we will do so in accordance with the law.

California Shine the Light Law:

If you are a California resident and have an established business relationship with us and want to receive information about how to exercise your third party disclosure choices, you must send a request to the following address with a preference on how our response to your request should be sent (email or postal mail). You may contact us in two ways: Send an email to: compliance@coastbenefits.com.

Alternatively, you may contact us via mail at: Coast Benefits, 3530 Camino del Rio North, Suite 110, San Diego, CA 92018.

For requests sent via email, you must put the statement “Your California Privacy Rights” in the subject field of your email. All requests sent via postal mail must be labeled “Your California Privacy Rights” on the envelope or post card and clearly stated on the actual request. For all requests, please include your name, street address, city, state, and zip code. (Your street address is optional if you wish to receive a response to your request via email. Please include your zip code for our own recordkeeping.) We will not accept requests via the telephone or by facsimile. We are not responsible for responding to notices that are not labeled or not sent properly, or do not have complete information.

If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California Business Professions Coder Section 22581 permits you to request and obtain removal of content or information you have publicly posted. To make such a request, please send an email with a detailed description of the specific content or information to the following address: Coast Benefits, Inc., 3530 Camino del Rio North, Suite 110, San Diego, CA 92108. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

Questions?

If you have questions or concerns regarding this statement, you should first contact us via email at the following email address: compliance@coastbenefits.com or mailing address: Coast Benefits, Inc., 3530 Camino del Rio North, Suite 110, San Diego, CA 92108.