Exhibit A
California-Specific Personal Information Policy

California Consumer Privacy Act Notice

If you are a natural person who is a California resident, as defined in the California Consumer Privacy Act of 2018 (the “CCPA”, then you are a “consumer” and this California Consumer Privacy Act Notice (“CCPA Notice”) applies to you and your personal information as defined in the CCPA (“personal information”).

1. Rights of California Consumers

Except for personal information we have because you or a business you work for or own has a direct business relationship with us, you have the following rights under the CCPA.

  • You have the right to request that we disclose to you the categories of personal information we have collected about you, the categories of sources from which we collected that personal information, the business purposes for which we use that information, and the specific pieces of personal information we have about you.
  • You have the right to request that we disclose to you the categories of personal information we have collected about you, the categories of personal information we have sold about you, and for each category of your personal information we have sold, the categories of third parties to which we sold that personal information.
  • You have the right to request the categories of your personal information we have disclosed for a business purpose.
  • You have the right to request that we delete any of your personal information that we have collected from you.

All consumers have the following rights under the CCPA:

  • You have the right to opt-out of our disclosure of your personal information to third parties in exchange for consideration (“sell”, “sale”, “selling”, “sold” under the CCPA). We don’t sell personal information, but if you wish to confirm this to us, follow the instructions at this link: California Consumer Information Requests. Please be aware that we may still disclose your personal information as permitted under the CCPA, including to comply with laws, to comply with government investigations, to cooperate with law enforcement agencies concerning the violation of laws, to assert our rights in connection with legal claims, and if we have de-identified and/or aggregated your personal information in compliance with the CCPA.
  • You have the right to not be discriminated against because you have exercised any of your rights under the CCPA.
  • You have the right to designate an authorized agent to make requests to us to exercise any of your rights under the CCPA.

To make any of the requests exercising your rights listed in this Section, you may contact us using the contact information here: California Consumer Information Requests. Please note that we have to be able to verify your identity in order to comply with any of your requests to exercise your rights, and as we explain below, we collect limited categories of personal information that can be used to verify your identity.

2. Personal Information Collected Through Our Corporate Website or for Marketing

This category of information is only for our corporate website, not the NoRedInk service. We do not sell personal information collected through our corporate website or for marketing (including through the toll-free telephone number posted on our website). Personal information we do collect, the business purpose for which we collect it, and the service providers or other third parties who may receive it are in the table below:

Personal Information Categories Business Purposes Recipient Categories
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
NOTE: We collect only your name, email address, phone number, state, and school name when volunteered on our website or if you call us. We collect the same information in lists we obtain from third parties of potentially interested teachers or administrators who may wish to use our service. Our website/webserver collects IP addresses automatically, as does every other website.
  • Marketing communications
  • Tracking and responding to CCPA consumer requests
  • Auditing and tracking website usage (Internet Protocol address only)
  • Detecting and responding to security incidents (Internet Protocol address only)
  • Fixing and improving our website (Internet Protocol address only)
Customer relationship management service provider
Email service provider
Cloud storage service provider
Legal counsel
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.
  • Tracking analytics of website usage
  • Detecting and responding to security incidents
  • Advertising on to website visitors
  • Fixing and improving our website
Cloud storage service provider
Website analytics service provider
Website hosting service provider
Social networks and other advertising providers
Security and web development service providers
Legal Counsel

3. Personal Information Collected within the NoRedInk Service.

Personal Information Categories Business Purposes Recipient Categories
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
NOTE: The only information in this category we collect within the NoRedink Service are names, email addresses, the school with which a user is affiliated, and in some cases, a school-provided login id. The NoRedInk Service webserver also collects IP addresses automatically, as does every other webserver.
  • Providing the NoRedInk service
  • Detecting and/or preventing malicious or invalid activity
Cloud storage service provider
Customer relationship management service provider
Email service provider
Other service providers who work for us (e.g., help desk providers)
Legal counsel
Demographic information: sex, age group, and household income
NOTE: The only information we collect in this category is sex (on a volunteer basis), grade (or status as an adult for non-student users), school and school district affiliation, and student interests (on a volunteer basis from the student, teacher or school).
  • Providing the NoRedInk service
  • Fixing and improving the NoRedInk service
Cloud storage service provider
Other service providers who work for us (e.g., help desk providers)
Legal counsel
Professional Information
NOTE: The only information we collect in this category is (for adult users) whether they are a teacher or other class of user in our system, the grades or classes with which the user are associated, and the school and district with which they are associated.
  • Providing the NoRedInk service
  • Fixing and improving the NoRedInk service
Cloud storage service provider
Customer relationship management service provider
Email service provider
Other service providers who work for us (e.g., help desk providers)
Legal counsel
Education Information
NOTE: In addition to the information above under “Identifiers” and “Demographic Information” we collect student-generated content like their essays, their teacher’s feedback on that work, and teacher-student communications.
  • Providing the NoRedInk service
  • Fixing and improving the NoRedInk service
Cloud storage service provider
Other service providers who work for us (e.g., help desk providers)
Legal counsel
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.
NOTE: Within the NoRedInk Service, our web hosting service provider only collects standard website log data and analytics through our website.
  • Providing the NoRedInk service
  • Fixing and improving the NoRedInk Service
  • Detecting and/or preventing malicious or invalid activity
Cloud storage service provider
Website analytics service provider
Website hosting service provider
Other service providers who work for us (e.g., help desk providers)
Legal counsel

We do not knowingly collect or sell the personal information of minors under the age of 16.

“Do Not Sell My Information” and Other Consumer Requests

1. You can send a request to NoRedInk in order to exercise any of your rights under the CCPA. We will check our records to see if we have your contact information based on the email address you provide us in that request.

You can contact us through any of the methods below. In addition to using these contacts to submit requests under the CCPA, you can also use them to ask questions or communicate concerns about our privacy policies and practices.

By submitting your personal information below to make your request, the personal information you provide for that purpose will be collected and retained for the duration required by the CCPA, used only to respond to your request and to keep the legally-required records. By submitting a request to us, you represent to us that you are (or you are an authorized agent of) the person you identify in the request. The CCPA requires us to verify that personal information is being released to the correct party for whom the information is being requested. In order to ensure that we only provide personal information to the correct person, we may also contact you via email at the address you provide to authenticate you are the owner of the email address being used. NoRedInk operates as a service provider when collecting and processing information for the schools we work with, so we will not be able to provide you with personal information we received through those schools.

2. If you want to opt-out of our corporate website tracking mechanisms, you can disable all cookies (which will affect the functionality of most websites), or only third party cookies, which may affect the functionality of some websites. Most tracking mechanisms use third party cookies. Then if you know which cookies you want to delete, you can delete those, or you can delete all of your cookies (which again, will affect the functionality of most websites— for example, you may lose your login status). You have to repeat the process for each browser you use. Google Analytics has a special link you will need to visit to learn how to stop it from tracking you: https://tools.google.com/dlpage/gaoptout

3. Each time you use a different computer or browser, we may not recognize that browser as one that has opted out from our corporate website tracking mechanisms. We also may not be able to recognize that we collected personal information from that computer or browser before you made the change unless it’s information that you volunteered to us or which we stored as part of your user account.

Version History

Effective since Effective until Policy
December 7, 2023 Link
September 1, 2022 December 7, 2023 Link
March 7, 2022 September 1, 2022 Link
April 1, 2021 March 7, 2022 Link
April 1, 2020 April 1, 2021 Link
April 29, 2015 April 1, 2020 Link