Explore Products
Explore Products

Utility Menu

Back to Legal

Supplemental California Consumer Privacy Act Disclosures

Contents

The following California Consumer Privacy Act Disclosures ("CCPA Disclosures") supplement the GoTo U.S. Privacy Policy ("GoTo," "we") in order to disclose information about our data processing practices as required by the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, the “CCPA"). These CCPA Disclosures are effective June 1, 2023. You can download a PDF version here.

I. Who We Are and Scope of this Privacy Policy

California residents are protected as "consumers" by the CCPA with respect to personal information.

Certain categories of personal data are statutorily excluded from the CCPA and/or these CCPA Disclosures, including the following:

(1) personal information reflecting a written or verbal communication or a transaction between a business and a consumer, where the consumer is a natural person who is acting as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, non-profit, or government agency and whose communications or transaction with the business occur solely within the context of the business conducting due diligence regarding, or providing or receiving a product or service to or from such company, partnership, sole proprietorship, non-profit, or government agency;

(2) personal information that is collected by a business about a natural person in the course of the natural person acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or contractor of that business to the extent that the natural person’s personal information is collected and used by the business solely within the context of the natural person’s role or former role as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or a contractor of that business;

(3) personal information that is collected by a business that is emergency contact information of the natural person acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or contractor of that business to the extent that the personal information is collected and used solely within the context of having an emergency contact on file; and

(4) personal information that is necessary for the business to retain to administer benefits for another natural person relating to the natural person acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or contractor of that business to the extent that the personal information is collected and used solely within the context of administering those benefits.

(5) personal information that we collect and process about GoTo employees, applicants, and contractors, which is governed by separate policies. The GoTo Applicant Privacy Notice is available online at https://www.goto.com/company/legal/applicant-privacy-notice.

II. How can a consumer with a disability access these CCPA Disclosures?

Consumers who have a visual disability may be able to use a screen reader or other text-to-speech or text-to-Braille tool to review the contents of this notice. You may also contact privacy@goto.com if you wish to obtain a copy of these CCPA Disclosures in an alternative format.

III. CCPA Notice at Collection Online

We address "at collection" disclosure requirements in our Privacy Notice (see Section I., “Who and what information is subject to these CCPA Disclosures”).

IV. CCPA Privacy Policy

Beyond the disclosures in the preceding "CCPA Notice at Collection Online" section, we are providing additional disclosures about consumer rights and our personal information handling practices in the preceding twelve (12) months, as required by the CCPA.

1. Right to Know About Personal Information Collected, Used, or Disclosed

This CCPA Privacy Policy describes the personal information we generally collect, use, and disclose about California residents. You have the right to request that we disclose what personal information we collect, use, and disclose about you specifically (“right to know”). To submit a request to exercise the right to know or for information on self-service procedures (where available), please visit our GoTo Individual Rights Management portal here or submit an email request to privacy@goto.com and include “California Request to Know” in the subject line. Please specify in your request the details you would like to know, including any specific pieces of personal information you would like to access.

We may ask that you provide certain information to verify your identity. If you have a password-protected account with us, we may verify your identity through our existing authentication practices for your account. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the personal information at issue. We will respond to your request in accordance with the CCPA. If we deny requests, we will explain why.

2. Our Personal Information Handling Practices in 2022

We have set out below the categories of personal information and sensitive personal information we have collected about California residents in the preceding twelve (12) months and, for each category of personal information and sensitive personal information collected, the categories of sources from which that information was collected, the business or commercial purposes for which the information was collected, and the categories of third parties with whom we shared the personal information.

Category of personal information We collected such personal information to use for the following business or commercial purposes: We have collected such personal information from the following categories of sources:

We shared* such personal information with the following categories of third parties:

*Sharing may be based on your instructions (e.g., through your use of a Service, a social media widget, third-party integration, etc).
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. To provide, operate and support our website and related Services; to address and respond to service, security, and customer support issues; to detect, prevent, or otherwise address technical issues; to detect, prevent, or otherwise address fraud, security issues, and unlawful activities; to comply with applicable law; to fulfill and perform contractual agreements and obligations; to improve and enhance our website and related Services; to provide analysis or valuable information back to our customers and users; to update, maintain, use and analyze our records; to identify prospects for marketing and provide products, Services, ads and other communications that may be of interest to you; and to understand how you use our website, what you like and dislike, and where you may have run into problems which need to be addressed.
  • Directly or indirectly from the California resident.
  • Directly or indirectly from other publicly available websites with permissible terms and conditions, customers, and business partners.
  • In a business-to-business context, from the business that employs the California resident.
  • Affiliates.
  • Vendors and service providers, including for data analytics and marketing and advertising our products and Services to you.
  • Reseller and channel partners (e.g., when a reseller sells or provides referrals for GoTo Services and/or third-party partners offer bundles with GoTo Services).
  • Third parties integrated into our Services.
  • Third parties as required by law or administrative orders and similar disclosures.
  • Third parties in connection with a merger, divestiture, sale, or asset transfer.
  • Third-party links and widgets (e.g., social media widgets).
  • Other third parties for whom we have obtained your permission to disclose your personal information.
Any categories of personal information described in subdivision (e) of Section 1798.80: “Personal information” means any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. “Personal information” does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records."

To provide, operate and support our website and related Services; to address and respond to service, security, and customer support issues; to detect, prevent, or otherwise address fraud, security issues, and unlawful activities; to comply with applicable law; to fulfill and perform contractual agreements and obligations; to provide analysis or valuable information back to our customers and users; to update, maintain, use and analyze our records; and to identify prospects for marketing and provide products, Services, ads and other communications that may be of interest to you.

For the avoidance of doubt, GoTo will not use your information in a manner that is inconsistent with or contrary to its original purposes of collection – sometimes called an ‘incompatible purpose.’ Many of the information types in the preceding definition are statutory but not requested, required, or utilized by GoTo either at all or for an inconsistent business purpose or otherwise.
  • Directly or indirectly from the California resident.
  • Directly or indirectly from other publicly available websites with permissible terms and conditions, customers, and business partners.
  • In a business-to-business context, from the business that employs the California resident.
  • Affiliates.
  • Vendors and service providers, including for data analytics and marketing and advertising our products and Services to you.
  • Reseller and channel partners (e.g., when a reseller sells or provides referrals for GoTo Services and/or third-party partners offer bundles with GoTo Services).
  • Third parties integrated into our Services.
  • Third parties as required by law or administrative orders and similar disclosures.
  • Third parties in connection with a merger, divestiture, sale, or asset transfer.
  • Third-party links and widgets (e.g., social media widgets).
  • Other third parties for whom we have obtained your permission to disclose your personal information.
Characteristics of protected classifications under California or federal law, including age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). N/A (subject to statutory exceptions described in Section I above) N/A (subject to statutory exceptions described in Section I above) N/A (subject to statutory exceptions described in Section I above)
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. To provide, operate and support our website and related Services; to address and respond to service, security, and customer support issues; to detect, prevent, or otherwise address fraud, security issues, and unlawful activities; to comply with applicable law; to fulfill and perform contractual agreements and obligations; to update, maintain, use and analyze our records; and to identify prospects for marketing and provide products, Services, ads and other communications that may be of interest to you.
  • Directly or indirectly from the California resident.
  • Directly or indirectly from other publicly available websites with permissible terms and conditions, customers, and business partners.
  • In a business-to-business context, from the business that employs the California resident.
  • Affiliates.
  • Vendors and service providers, including for data analytics and marketing and advertising our products and Services to you.
  • Reseller and channel partners (e.g., when a reseller sells or provides referrals for GoTo Services and/or third-party partners offer bundles with GoTo Services)
  • Third parties integrated into our Services.
  • Third parties as required by law or administrative orders and similar disclosures.
  • Third parties in connection with a merger, divestiture, sale, or asset transfer.
  • Third-party links and widgets (e.g., social media widgets).
  • Other third parties for whom we have obtained your permission to disclose your personal information.
Biometric information. N/A N/A N/A
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement. To provide, operate and support our website and related services; to address and respond to service, security, and customer support issues; to detect, prevent, or otherwise address technical issues; to detect, prevent, or otherwise address fraud, security issues, and unlawful activities; to improve and enhance our website and related services; to provide analysis or valuable information back to our customers and users; to identify prospects for marketing and provide products, services, ads and other communications that may be of interest to you; and to understand how you use our website, what you like and dislike, and where you may have run into problems which need to be addressed.
  • Directly or indirectly from the California resident.
  • Directly or indirectly from other publicly available websites with permissible terms and conditions, customers, and business partners.
  • In a business-to-business context, from the business that employs the California resident.
  • Affiliates.
  • Vendors and service providers, including for data analytics and marketing and advertising our products and Services to you.
  • Reseller and channel partners (e.g., when a reseller sells or provides referrals for GoTo Services and/or third-party partners offer bundles with GoTo Services).
  • Third parties integrated into our Services.
  • Third parties as required by law or administrative orders and similar disclosures.
  • Third parties in connection with a merger, divestiture, sale, or asset transfer.
  • Third-party links and widgets (e.g., social media widgets).
  • Other third parties for whom we have obtained your permission to disclose your personal information.
Geolocation data. To provide, operate and support our website and related Services; to address and respond to service, security, and customer support issues; to detect, prevent, or otherwise address technical issues; to detect, prevent, or otherwise address fraud, security issues, and unlawful activities; to comply with applicable law; and to fulfill and perform contractual agreements and obligations;
  • Directly or indirectly from the California resident.
  • Directly or indirectly from other publicly available websites with permissible terms and conditions, customers, and business partners.
  • In a business-to-business context, from the business that employs the California resident.
  • Affiliates.
  • Vendors and service providers, including for data analytics and marketing and advertising our products and Services to you.
  • Reseller and channel partners (e.g., when a reseller sells or provides referrals for GoTo Services and/or third-party partners offer bundles with GoTo Services).
  • Third parties integrated into our Services.
  • Third parties as required by law or administrative orders and similar disclosures.
  • Third parties in connection with a merger, divestiture, sale, or asset transfer.
  • Third-party links and widgets (e.g., social media widgets).
  • Other third parties for whom we have obtained your permission to disclose your personal information.
Audio, electronic, visual, thermal, olfactory, or similar information. N/A N/A N/A
Professional or employment-related information. N/A (subject to statutory exceptions described in Section I above) N/A (subject to statutory exceptions described in Section I above) N/A (subject to statutory exceptions described in Section I above)
Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99) N/A (subject to statutory exceptions described in Section I above) N/A (subject to statutory exceptions described in Section I above) N/A (subject to statutory exceptions described in Section I above)
Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes To provide, operate and support our website and related Services; to detect, prevent, or otherwise address fraud, security issues, and unlawful activities; to improve and enhance our website and related services; to identify prospects for marketing and provide products, services, ads and other communications that may be of interest to you; and to understand how you use our website, what you like and dislike, and where you may have run into problems which need to be addressed. Based on personal information collected from the categories of sources described above.
  • Affiliates.
  • Vendors and service providers, including for data analytics and marketing and advertising our products and services to you.
  • Reseller and channel partners (e.g., when a reseller sells or provides referrals for GoTo Services and/or third-party partners offer bundles with GoTo Services).
  • Third parties integrated into our Services.
  • Third parties as required by law or administrative orders and similar disclosures.
  • Third parties in connection with a merger, divestiture, sale, or asset transfer.
  • Third-party links and widgets (e.g., social media widgets).
  • Other third parties for whom we have obtained your permission to disclose your personal information.
Sensitive Personal Information (e.g., financial account information for payments). To provide, operate and support our website and related Services; to detect, prevent, or otherwise address fraud, security issues, and unlawful activities. Directly or indirectly from the California resident. N/A (subject to statutory exceptions described in Section I above)

3. Sensitive Personal Information

To the extent we collect sensitive personal information, pursuant to section 1798.121(d), GoTo’s position is not to use this information to infer characteristics about you.

4. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes described in our Privacy Policy (such as to provide the Services and to provide customer support), subject to your right to delete your Personal Information as described below. We may retain some information for a longer period to the extent necessary to comply with any applicable legal or regulatory obligations.

5. How We Disclose Your Information

Over the preceding twelve (12) months, we disclosed certain categories of California residents’ personal information to the categories of third parties as shown in the table above.

6. Rights Under the CCPA and How to Exercise Them

Right to Delete

You have a right to request the deletion of personal information that we collect or maintain about you, subject to certain exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal information we may have about you.

Right to Opt-Out of the Sale or Sharing of Personal Information

While GoTo does not “sell” your personal information in the conventional sense, we use certain cookies and tracking technologies that may be considered “selling” or “sharing” under certain states laws. We do so to provide our customers and prospective customers with more relevant ads and content. If you wish to opt out of this type of activity, please click here.

GoTo also responds to Global Privacy Control (“GPC”) signals; for more details, including how to turn on GPC, please visit https://globalprivacycontrol.org/.

We do not knowingly sell or share the personal information of minors under sixteen (16) years of age.

Right to Limit the Use of Sensitive Personal Information

You have the right to limit how we use or disclose your sensitive information; however, as set forth in Section 3, GoTo does not use or disclose your sensitive personal information for purposes other than permitted under applicable U.S. state data privacy laws.

Right to Non-Discrimination

You shall not be discriminated against because you exercise any of your rights under the CCPA.

7. Exercising Your Rights

To submit a request to exercise your rights or for information on self-service procedures (where available), please visit our GoTo Individual Rights Management portal here or submit an email request to privacy@goto.com.  We may ask that you provide certain information to verify your identity. If you have a password-protected account with us, we may verify your identity through our existing authentication practices for your account. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the personal information at issue. Once we have verified your identity, we will respond to your request in accordance with the CCPA. If we deny your request, we will explain why.

8. Authorized Agent

You can designate an authorized agent to make a request under the CCPA on your behalf if:

  • The authorized agent is a natural person or a business entity registered with the Secretary of State of California; and
  • You sign a written declaration that you authorize the authorized agent to act on your behalf.

If you use an authorized agent to submit a request to exercise your right to know or your right to request deletion, please have the authorized agent take the following steps in addition to the steps described above:

  • Mail your written declaration authorizing the authorized agent to act on your behalf, certified by a California notary public, to Attn: GoTo Legal Department (Privacy Team), 333 Summer Street, 5th Floor, Boston, MA 02210 with an e-mail cc: to privacy@goto.com; and
  • Provide any information we request in our response to your email to verify your identity. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the personal information at issue.

If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4000 to 4465, it may not be necessary to perform these steps and we will respond to any request from such authorized agent in accordance with the CCPA.

9. Contact for More Information

If you have questions or concerns regarding these CCPA Disclosures, our Privacy Policy, or practices, you may contact us using the following details:

Email address: privacy@goto.com

Postal address: Attn: GoTo Legal Department (Privacy Team), 333 Summer Street, 5th Floor, Boston, MA 02210 with an e-mail cc: to privacy@goto.com