California Privacy Notice (CCPA/CPRA) — Praxail
Last Updated: 03/11/2025
This notice supplements the Praxail Ltd. (“Praxail”, “we”, “us”) Privacy Policy and applies solely to California residents, in accordance with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (“CCPA/CPRA”). It is our Notice at Collection for California.
If anything here conflicts with a signed agreement you have with Praxail, that agreement controls for the Services it covers.
1. What We Collect, Why, and For How Long
We collect personal information (“PI”) in a B2B context to operate our website and provide consulting/implementation Services. The table shows the categories we have collected in the last 12 months, typical sources, purposes, retention, and whether we “sell” or “share” them (as defined by CPRA). “Share” refers to disclosure for cross-context behavioral advertising.
| Category (CPRA) | Examples | Sources | Purposes (summary) | Retention (typical) | Sold? | Shared for CCBA? |
|---|---|---|---|---|---|---|
| Identifiers | name, email, phone, IP address | you; your org; site analytics | respond to enquiries; provide Services; security | enquiries 24 months; project records contract term + up to 6 years | No | No |
| Customer records | billing contact, company address, VAT/tax metadata | you; your org | account/admin, invoicing, compliance | contract term + up to 6 years | No | No |
| Commercial info | service history, SOW/MSA references | you; your org | scoping, delivery, support | contract term + up to 6 years | No | No |
| Internet / network activity | page views, event logs, IP/UA | your browser; analytics tools | site operations, security, analytics | 12–26 months (tool default or shorter) | No | No |
| Professional / employment info | role, employer, team | you; your org | B2B sales and delivery | enquiries 24 months; project records per above | No | No |
| Inferences | preferences derived from interactions | analytics/CRM | tailoring comms (B2B) | enquiries 24 months | No | No |
We do not intentionally collect the following on our public site: protected classifications, precise geolocation, biometric data, or sensitive PI. For client portals (if used), we may process account log-in credentials solely to provide access; we do not use Sensitive PI to infer characteristics.
We do not sell PI and do not “share” PI for cross-context behavioral advertising.
2. Sensitive Personal Information (SPI)
We do not use or disclose Sensitive PI (e.g., precise geolocation, government IDs, financial account numbers, contents of communications) for the purpose of inferring characteristics. If we ever need to process SPI for a client engagement, it will be under documented instructions and subject to contractual safeguards.
Because we do not use SPI beyond the limited, permitted purposes, the Right to Limit SPI does not apply to our current practices.
3. Purposes of Use/Disclosure
We use PI to: operate and secure the site; communicate; scope and deliver Services; perform analytics; comply with law; and protect rights and safety. We disclose PI to service providers (hosting, analytics, communications, ticketing, security, model/AI providers) under contracts restricting use to our purposes.
4. Your CPRA Rights
Subject to exceptions, California residents may:
- Know/Access: request the categories and specific pieces of PI we have collected about you.
- Delete: request deletion of PI.
- Correct: request correction of inaccurate PI.
- Opt-out of Sale/Share: direct us not to sell or share PI (we do not sell/share; see Section 6).
- Non-discrimination: we will not discriminate against you for exercising rights.
We aim to respond within 45 days (may extend once by 45 days where reasonably necessary). We may need to verify your identity and request details we reasonably require to process your request.
5. How to Submit a Request
Contact us by one of methods described in section 10. Contact Us.
Authorised agents may submit requests with proof of authority and, where required, subject verification.
6. “Do Not Sell or Share My Personal Information” & GPC
- We do not sell PI and we do not share PI for cross-context behavioral advertising.
- If our practices change (e.g., we introduce retargeting), we will update this notice and provide a “Do Not Sell or Share My Personal Information” link at /do-not-sell and in our cookie banner.
- We honour Global Privacy Control (GPC) signals where applicable.
7. Children
We do not knowingly sell or share PI of consumers under 16 years of age, and our site/services are aimed at a professional audience.
8. Financial Incentives
We do not offer programs that price or provide goods/services differently in exchange for personal information.
9. Changes to this Notice
We may update this notice from time to time. The “Last Updated” date shows when changes took effect. Material changes will be highlighted on the site or via direct notice where appropriate.
10. Contact Us
Questions about this notice or your California rights:
- Web form: Contact Form
- Email: contact@praxail.com
- Postal: Praxail Ltd, 124 City Road, London, EC1V 2NX, United Kingdom