Policies

Your state privacy rights

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “California Privacy Law”), as well as other state consumer privacy laws, provide their residents with additional rights regarding our use of their personal information. These rights are described below.

The Right to Know and to Confirm, and the Right to Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the “right to know” and the “right to confirm”). Once we receive your request and confirm your identity, we will disclose to you:

• The categories of personal information that we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • Sales, identifying the personal information categories that each category of recipient purchased; and
  • Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
• The specific pieces of personal information we collected about you (also called a “data portability” request).

The Right to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the "right to delete"). Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another individual to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with specific laws, such as the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or de-identify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

The Right to Correct Inaccurate Information

You have the right to correct any inaccurate personal information about you that we have in our possession (the “right to correct”). Once we receive your request and confirm your identity, we will disclose to you the specific pieces of personal information that we have collected about you. You will then have the opportunity to direct us to correct the pieces of information which you believe are inaccurate.

We may deny your request to correct if we believe the updated information is incorrect or is being used for any fraudulent or deceptive purpose.

The Right to Restrict Sensitive Personal Information Processing

You have the right to restrict our processing of your sensitive personal information (the “right to restrict”). Once we receive your request and verify your identity, we will cease the processing of your sensitive personal information for the purpose of inferring characteristics about you. Please note that we may continue to process your sensitive personal information for other purposes consistent with this privacy policy.

The Right to Opt Out of the Processing and Sale of Personal Information

You have the right to direct us to not process your personal information for targeted advertising and to not sell your personal information at any time (the "right to opt-out"). Once we receive your request, we will no longer use or process your personal information for the purpose of providing targeted advertising to you based on your activity and interests. We will also no longer sell (as that term is defined by relevant and applicable state law) your personal information to third parties for targeted advertising purposes.

The Right to Opt Out of the Sharing of Personal Information for Cross-Contextual Behavioral Advertising

You have the right to opt out of the sharing of your personal information with third parties for cross-contextual behavioral advertising. Once we receive your request, we will no longer use or process your personal information for the purpose of advertising to you based on your individual activity.

The Right to Opt Out of Profiling

You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects to you. Once we receive your request, we will no longer use or process your personal information for making decisions that produce a legal or similarly significant effect to you.

The Right to Be Free from Discrimination

We will not discriminate against you for exercising any of your rights under applicable state privacy law. Unless permitted by state law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by state privacy law that can result in different prices, rates, or quality levels. Any legally permitted financial incentive we offer will reasonably relate to your personal information's value and will contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Exercising your rights

To exercise your rights described in this privacy policy, you may submit a request to us by:

• Contacting us online at: https://www.clarkassociatesinc.biz/contact/
• Emailing us at: [email protected]
• Calling us at 1-800-521-1035
• Mailing us at: Clark Core Services, LLC, Attn: Legal Department, 2205 Old Philadelphia Pike, Lancaster, PA 17602

Only you or someone legally authorized to act on your behalf may make a request related to your personal information. You may also make a request on behalf of your child. You may only submit a request twice within a 12-month period.

We may not require you to provide additional personal information to verify your identity for opt-out requests. However, to process other requests, we may require you to:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include:
• Providing at least three (3) pieces of information that match the information we have about you.
• Providing a signed declaration, under penalty of perjury, that you are the individual about whom you have submitted the request, or that you are legally authorized to submit the request on the individual's behalf.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you.

You do not need to create an account with us to submit a request. We will only use the personal information provided in the request to verify the requestor's identity or authority to make it.

You may appeal a decision concerning your privacy rights by emailing us at [email protected] or by writing us at Clark Core Services, LLC, Attn: Legal Department, 2205 Old Philadelphia Pike, Lancaster, PA 17602.

Response timing and format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please email [email protected] or call 1-800-521-1035.

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we may deliver our written response to that account. Alternatively, or if you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Other California privacy rights

California's “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected] or write us at: Clark Core Services, LLC, Attn: Legal Department, 2205 Old Philadelphia Pike, Lancaster, PA 17602.

If you are a California resident under 18 years old and a registered user, you can request that we remove content or information that you have posted to our Website. Please note that fulfilment of the request may not ensure complete or comprehensive removal (for example, copies may remain viewable in cached and archived pages or might have been copied and stored by other Website users). To request removal of content or information, send an email to [email protected].

Data security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone, and you acknowledge and agree not to provide any other person with access to the Website or portions of it using your username, password, or other security information. If you share this information with a third party (or authorize a third party to have access to or be linked to your account through any of the Website's features), that individual will have access to your account and personal information, including, but not limited to, your credit card information. You agree to take responsibility for actions taken by an individual with whom you have shared or authorized access to your account.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Transfer of data

Your personal information may be transferred and maintained on computers located outside of your state, province, country, or other jurisdiction where the data protection laws may differ. If you are located outside of the United States and choose to provide information to us, note that we transfer the data, including, but not limited to, personal information, to the United States and process it there. Your use of the Website and submission of such information represents your consent to our Terms of Use, Privacy Policy, and transfer of personal information. The Company will take reasonable steps to ensure your personal data is treated securely and is not transferred to an organization or country unless there are reasonable security controls in place.

Children under the age of 16

Our Website is not intended for children under the age of 16. No one under the age of 16 may provide any personal information to or on the Website. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information this Website or through any of its features, register on the Website, make any purchases through the Website, use any interactive or public comment features on the Website, or provide any information about yourself to us, including, but not limited to, your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at: [email protected]. California residents under 16 may have additional rights regarding the collection and sale of their personal information.

Changes to the Privacy Policy

We will post any changes that we make to our Privacy Policy on this page. If we make material changes on how we treat our users’ personal information, we will notify you by email to the primary email address specified in your account or through notice on the Website homepage. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active and deliverable email address for you and for periodically visiting our Website, Privacy Policy, and Terms of Use to check for any changes. Changes to the Privacy Policy, and Terms of Use are effective upon posting to the Website.

Comments and concerns

All questions or comments about this privacy and our privacy practices should be directed to: [email protected] or (717) 392-7550. You may also contact us online using our Contact Form available at https://www.clarkassociatesinc.biz/contact/.