Effective Date: March 1, 2025
CALIFORNIA PRIVACY NOTICE (CCPA/CPRA)
This California Privacy Notice supplements the general Privacy Notice and is provided in accordance with CalOPPA, CCPA, and CPRA requirements.
This Addendum supplements the information contained in the SCALIBIT.COM Privacy Notice and applies to Website visitors, Customers, Users, Registrants, End Users, Affiliates and other individuals (incl. households) who are residents of the State of California, USA (“consumer”, “you”, “your”).
For avoidance of doubt, the term “data subject” used in the Privacy Notice shall correspond to the term “consumer” used herein and the term “personal data” in the Privacy Notice shall be equivalent to the term “personal information” used herein. All other terms which are not explicitly defined in this Addendum shall have the meaning as set forth in the Privacy Notice.
This Addendum is drafted in compliance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CPRA”), together hereinafter referred to as the “CCPA”, and other relevant California privacy laws and its purpose is to provide additional privacy disclosures and to inform you of your additional rights as a California resident.
SCALIBIT supports the CCPA and all SCALIBIT services comply with its provisions.
For managed environments (such as Shared Web Hosting: cPanel Hosting, CWPpro Hosting, WordPress Hosting) or temporary technical support cases where SCALIBIT personnel may require limited, purpose-bound access, SCALIBIT acts as a “service provider” under the California Consumer Privacy Act (CCPA, Cal. Civ. Code §1798.140) and our Data Processing Addendum (DPA).
SCALIBIT acts as a “business” with respect to customer account, billing, and authentication data. We do not act as a Data Controller or a Data Processor for any data stored or transmitted on customer-managed or self-managed servers, including but not limited to Virtual Machines (VPS, VDS, Dedicated Cloud Servers), Cloud Services (Cloud Hosting, Cloud Servers, Cloud Backup), Cloud Compute (Standard Performance, High Performance, High Frequency), Optimized Cloud Compute (General Purpose, CPU Optimized, Memory Optimized, Storage Optimized), and Dedicated Servers or Bare Metal systems. Any support access, if requested, is strictly least-privilege, logged, and time-bound.
1. Categories of Personal Information We Collect
We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer (“personal information”).
Section 2 (“Categories of data subjects and types of personal data”) of the Privacy Notice describes in detail what categories of personal information we have collected from consumers within the last twelve (12) months.
Sensitive personal information
Some of the personal information we collect may be considered “sensitive” within the meaning of Section 1798.140 (ae) of the CCPA. We may collect the following sensitive personal information: social security, driver’s license, state identification card, or passport number; account log-in information; and the contents of a consumer’s mail, email, and text messages unless we are the intended recipient of the communication. Please note that SCALIBIT does not directly collect or store any payment card details. All payment transactions are securely processed through trusted third-party payment providers such as PayPal and Stripe. SCALIBIT does not use sensitive personal information to infer characteristics or for any profiling purpose.
2. Sources of Personal Information Collection
Apart from you, being the main source of information we collect about you, we may also collect personal information from publicly accessible sources (e.g. companies trade register, WHOIS, local national list(s) of sanctioned persons) and/or third parties, such as our affiliates, trusted partners, including but not limited to marketing, advertising, security service providers, etc.
3. Purposes for Collection of Personal Information, incl. Sensitive Personal Information
The business and commercial purposes for which we collect, use and disclose personal information, incl. sensitive personal information about consumers are described in detail in Section 4. (“Purposes of and legal basis for data processing”) of the Privacy Notice.
4. Disclosure of Personal Information
SCALIBIT may disclose Customer Data, Service Details, account information, or associated IP address data to competent authorities or legally authorized bodies — including but not limited to law enforcement agencies, prosecutor’s offices, courts, or data protection regulators — when such disclosure is required to comply with applicable laws, regulations, or enforceable legal requests. All disclosures are handled strictly within the scope of the law, upon receipt of an official and verifiable request, and limited to the minimum necessary information to fulfill the legal obligation. SCALIBIT carefully reviews each request to ensure that it is lawful, proportionate, and specific in scope.
Unless prohibited by law or court order, SCALIBIT will make reasonable efforts to notify the affected Customer prior to any disclosure, particularly where the Customer’s data or account may be directly impacted by such request. We maintain detailed records of such disclosures to ensure transparency and accountability in accordance with applicable privacy legislation.
4.1 Cross-Border Data Transfers
SCALIBIT operates as a global infrastructure provider with servers, data centers, and service partners located in multiple jurisdictions — including the United States, Europe, and Asia. As a result, personal information collected from California residents may be transferred to, stored, or processed in countries outside of California or the United States.
These transfers are performed for legitimate business and operational purposes, such as the delivery of Services, technical support, billing, network and data security, and compliance operations. Such transfers are made in accordance with this California Privacy Notice and applicable privacy laws.
Where applicable, SCALIBIT applies appropriate organizational and technical measures to ensure that cross-border data processing maintains an adequate level of protection, consistent with the principles of the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), as well as other relevant privacy frameworks including the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Turkish Law on the Protection of Personal Data (KVKK). In the event of a legal request for data hosted outside the U.S., SCALIBIT adheres to the strict cross-border requirements detailed in its Legal Requests Policy, ensuring the involvement of the relevant Host Jurisdiction's laws and recognized international cooperation mechanisms.
SCALIBIT remains committed to transparency and ensures that California residents are informed about how and where their personal information may be processed, stored, or transferred as part of its global infrastructure operations.
5. Data Retention Periods
The periods for which we retain your personal information are described in Section 25. (“Retention of Personal Data”) of the Privacy Notice.
6. Children
The Site is not for use by children under the age of 18 years and SCALIBIT does not knowingly collect, store, use or share the personal information of children under 18 years.
IF YOU ARE A CALIFORNIA RESIDENT UNDER THE AGE OF 18, DO NOT SHARE ANY PERSONAL INFORMATION ON THE SITE, IN POSTS OR VIA MESSAGING. If you do post any personal information, you can remove it using Services functionality. This removal may not be complete given the nature of the Internet. Contact us at privacy@scalibit.com for assistance.
7. Sale and Share of Personal Information
In the course of provision of our Services we do not sell any personal information related to consumers.
SCALIBIT has taken substantial steps to identify whether any of our activities as well as our data sharing arrangements would constitute a “sale” or “share” under the CCPA. Due to the complexities and ambiguities in the CCPA, we evaluate some of our third-party relationships periodically.
Under the CCPA, “sell,” “selling,” “sale,” or “sold,’’ means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration. Therefore, it does not necessarily mean money was exchanged for the transfer of personal information, but the transfer may still be considered a “sale”. “Share” is defined as sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.
8. Consumer Rights Under the CCPA
The CCPA provides consumers with specific rights with respect to their personal information as follows
8.1. Right to opt-out from sale or share of personal information
Right to opt-out from sale of personal data: If you are a US resident, you have the right to opt-out from the sale of your personal data. Although we do not sell your personal data (as defined in the applicable US privacy laws), you may submit a request and/or direct a query you may have related to the sale of personal data at any time via email to privacy@scalibit.com.
A consumer shall have the right, at any time, to direct SCALIBIT not to sell or share the consumer’s personal information (“the right to opt-out”). Such a request of the consumer shall be respected for at least twelve (12) months before requesting that the consumer authorizes again the sale or share of the consumer’s personal information. In order to process the consumer’s request, SCALIBIT may use any personal information collected from the consumer in connection with the submission of the consumer’s opt-out request solely for the purposes of complying with the opt-out request.
To exercise your right to opt-out from sale or share or any other right under the CCPA, you may submit a request at any time via email to privacy@scalibit.com. At a minimum, you must provide us with your names and email address you have used when engaging with us. We reserve the right to request additional information in order to identify you and process your request. We will keep a record of this request. Please note that we will not discriminate against you if you exercise your rights under the CCPA.
8.2. Right to know request. Right to access and data portability
Pursuant to the CCPA, you have a right to request information about the collection, use, and disclosure of your personal information performed by SCALIBIT over the preceding twelve (12) months, as well as to ask to provide you with these specific information:
-
Categories and specific pieces of personal information we have collected about you;
-
Categories of sources from which we collect personal information about you;
-
Purposes for collecting, using, selling or sharing personal information;
-
Categories of third parties to whom we disclose personal information;
-
If applicable, categories of personal information sold, shared or disclosed about you and the categories of third parties to whom the personal information was sold, shared or disclosed, by category or categories of personal information for each category of third parties to whom the personal information was sold.
8.3. Right to delete request
You have a right to request that we delete a part of or all your personal information, subject to certain exceptions (i.e., when the information is necessary to: complete a transition or provide a service requested by you; debug or repair expected product functionality; detect or investigate cyber threats, etc.). Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records, unless an exception applies.
8.4. Right to correct inaccurate personal information
You have the right to request that we correct inaccuracies in the personal information we have collected about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
8.5. Right to limit the use and disclosure of sensitive personal information.
The CCPA grants you the right to instruct a business to limit its use or disclosure of your sensitive personal information to that use which is necessary to perform the services reasonably expected by you in your request for those services and to perform certain activities permitted by the CCPA. Please note that we do not use or disclose sensitive personal data for any purposes other than those necessary to provide you with our services or as permitted by the CCPA.
8.6. Right to remain non-discriminated
SCALIBIT shall not discriminate against a consumer because the latter exercised any of the consumer’s rights under the CCPA, including, but not limited to, by:
-
Denying any services to the consumer;
-
Charging different prices or rates for services, including through the use of discounts or other benefits or imposing penalties;
-
Providing a different level or quality of services to the consumer;
-
Suggesting that the consumer will receive a different price or rate for services or a different level or quality of services.
9. Exercising Your Rights
If you wish to exercise any of your rights under the CCPA, please submit your request to the following email address: privacy@scalibit.com.
You can exercise any of your rights by submitting a request to the email address specified in the “Contact information” section of this Notice. We will review and address your request(s) within one month as of the date of receipt. Please note that if your request is particularly complex or you have made a number of requests, it may take us longer than a month to respond to you. In this case, we will notify you and keep you updated. Please note that we may ask you to provide us with additional information necessary to verify your identity prior to our response. However, in certain circumstances such as to comply with the applicable legislation, we may be unable to honour your request, for which you will be duly notified.
In certain cases, SCALIBIT may request identity verification or supporting documentation (such as a government-issued ID, passport, business registration certificate, tax identification, or other relevant proof) to confirm account ownership, prevent fraud or abuse, ensure compliance with applicable laws (including but not limited to anti-abuse, anti-fraud, anti-money-laundering, and security verification requirements), or verify the legitimacy of a transaction or service request. This verification is performed only through secure and official SCALIBIT channels, such as your Client Portal or the authorized support ticket system. Such information is processed solely for verification purposes, stored securely, and may be retained as required by law or for legitimate business purposes, including cooperation with law enforcement authorities or compliance regulators when necessary. This information will never be used for profiling, marketing, or any unrelated activities.
In addition to the above rights, you can also access, correct, and delete certain personal data associated with your account through the “Owner Profile Details” Section in your Client Area.
As per the CCPA, SCALIBIT shall take into consideration the following requirements when answering a consumer’s request:
-
The consumer shall place a verifiable consumer request. SCALIBIT is not obliged to respond to the request if it cannot verify that the consumer making the request is the consumer about whom SCALIBIT has collected information or is a person authorised by the consumer to act on the consumer’s behalf.
-
The consumer may also designate an authorised agent to make a request on his/her behalf.
-
SCALIBIT shall respond to the request within 45 (forty-five) days of receiving it. The time period for response may be extended once by an additional 45 (forty-five) days when reasonably necessary, and upon notification to the consumer.
With respect to your right to know and data portability — SCALIBIT is obliged to provide the required information no more than twice in 12 (twelve) months. The provision of information by SCALIBIT is generally free of charge. The disclosure shall cover the 12-month period preceding the receipt of the verifiable consumer request and shall be made in writing and delivered through the consumer’s Client Area, if the consumer maintains an account with us, or by mail or electronically at the consumer’s option if the consumer does not maintain an account with us, in a readily useable format that allows the consumer to transmit this information from one entity to another without hindrance. SCALIBIT may require authentication of the consumer that is reasonable in light of the nature of the personal information requested, but shall not require the consumer to create an account in order to make a verifiable consumer request. If the consumer maintains an account with SCALIBIT, we may require the consumer to submit the request through its Client Area.
10. Contact Information
If you have any questions or concerns regarding your rights under the CCPA or this California Privacy Notice, please contact us at privacy@scalibit.com or refer to the SCALIBIT Privacy Notice.
11. Updates and Revisions
We may revise, amend, or modify this California Privacy Notice from time to time. Please refer to the “Effective Date” at the top of this page to see when it was last updated. Any changes to this California Privacy Notice will become effective when we post the revised version on the Site. Your continued use of SCALIBIT’s Site or Services following such updates constitutes your acceptance of the revised Notice.
