Under the California Consumer Privacy Act of 2018 as amended by the Consumer Privacy Rights Act of 2020 (CCPA) and other similar applicable laws, consumers may be entitled to certain notices and disclosures regarding the collection and use of their personal information when using DFIN websites, products, and solutions (“Our Sites”). This notice is intended to provide the Notice at Collection (‘’Notice’’) required under Consumer Data Protection Laws.
Categories of Personal Information We Collect:
Category | Examples |
Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name and login information, Social Security number, driver's license number, passport number, or other similar identifiers. |
Personal information categories listed under applicable laws. | A name, signature, Social Security number, physical characteristics or description, address, telephone number, text messages, email, passport number, driver's license or state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, or any similar information. |
Special Personal Information (SPI) – Protected classification characteristics under applicable laws. | Age, race, national origin, citizenship, religion, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, pregnancy, childbirth, and related medical conditions), sexual orientation, veteran or military status, and neural data. |
Contractual information. | Information collected as part of the products and services we provide to you. |
Commercial information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
Internet or other similar network activity. | Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. |
Human Resources (HR) data. | Employee compensation, demographics, health and financial benefits, job performance evaluations, training records, and attendance records. |
Professional or employment-related information. | Current or past employment history or performance evaluations. |
This section does not address or apply to our handling of:
- Publicly available information from government records.
- Information excluded from Consumer Data Protection Laws, including but not limited to health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA) or the Gramm-Leach-Bliley Act (GLBA).
- De-identified or aggregated consumer information. De-identified information is data that has had all personally identified information removed from it. Aggregated information is numerical or non-numerical information that is compiled into data summaries or summary reports for data statistics or public reporting.
Purposes for Which We Use Your Personal Information
DFIN uses, stores, and processes the personal information we collect to:
- Where relevant, operate and provide DFIN’s products and services, including registering, creating, maintaining, customizing, and securing your customer account with us.
- Fulfil our obligations under a contract with you, which may include enforcing and/or applying the terms of any of our user agreements.
- Follow up on our communication with you and create a record of our communication with you for quality purposes.
- Process your requests, purchases, transactions, and payments.
- Where appropriate, provide you with information or marketing communications for DFIN products and services which you request from us, similar products or services which you have already requested, or personalized offers and content based on your interactions with us and usage of our products.
- Provide testing, research, analysis, and product development, including developing and improving our Site(s), products, and services.
- Provide technical support, respond to inquiries, investigate and address concerns, and monitor and improve our responses.
- Maintain the safety, security, and integrity of Our Site(s), rights, property, products and services, databases and other technology assets, and business of DFIN, DFIN’s users, or others.
- Cooperate with law enforcement requests and as required by applicable law, court orders, or governmental regulations.
- Manage our everyday business needs, such as internal account management, customer reporting, contract management, site administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance.
- As described to you when collecting your personal information or sensitive personal information.
- Any other basis that lawfully entitles us to process your personal information.
DFIN reserves the right to transfer and disclose your information if DFIN becomes involved in a business divestiture, change of control, sale, merger, or acquisition of all or a part of its business.
Sale or Sharing of Personal Information
In the preceding twelve (12) months we have not “sold” any category of personal information set forth in this Notice, for the purposes of Consumer Data Protection Laws. DFIN does not sell the personal information of its employees, contractors, customers, third parties, or any other affiliation to others. DFIN does not sell or share personal information for cross context behavioral advertising. DFIN will only disclose your personal information for advertising purposes through targeting or advertising cookies with your affirmative, opt in consent. For more information on cookies, please refer to our Cookie Notice. We do not have actual knowledge that we sell or share personal information of minors under 16 years of age. DFIN does not conduct business directly with individual consumers. Our business partnerships are business-to-business (B2B).
How Long We Keep Your Personal Information
We will retain your personal information for as long as you have an account with us, or we are providing products or services to you. Thereafter, we will keep your personal information for only as long as is necessary to:
- Respond to any questions, complaints, or claims made by you or on your behalf.
- Keep records required by applicable laws and regulations or DFIN's retention and deletion policies.
For more information, please refer to our Privacy Notice.
Last Updated: May 1, 2025.