Additional California Privacy Disclosures Supplement

Effective as of January 1, 2020

If you are a California resident, the processing of certain personal data about you may be subject to the California Consumer Privacy Act (“CCPA”) and other applicable California state privacy laws. Beginning January 1, 2020, the CCPA gives you certain rights with respect to the processing of your personal data (known as “personal information” under the CCPA).

This supplement provides privacy disclosures and informs you of your additional rights as a California resident, and should be read in conjunction with our Privacy Policy.

I. Requests to Exercise your Rights

A. Your Right to Know

Under the CCPA, you have the right to request information about your personal information that we have collected, disclosed for a business purpose, or sold during the prior twelve (12) months. More specifically, you may ask that we provide you with the following:

1. categories of personal information we have collected about you;
2. categories of sources from which we collect personal information;
3. our business or commercial purpose for collecting or selling personal information;
4. categories of third parties with which we share personal information;
5. the specific pieces of personal information we have collected about you;
6. categories of personal information disclosed about you for a business purpose;
7. categories of personal information that we sold about you; and
8. categories of third parties to whom the personal information was sold, by category or categories of personal information for each category of third parties to whom the personal information was sold.

To make a verifiable request for information about the personal information we have collected, disclosed for a business purpose, or have sold about you, please email us at privacy.officer@nearmap.com or call us at +1 (888) 914-9661 (PIN: 351216).

B. Your Right to Deletion

You also have a right to request that we delete personal information, subject to certain exceptions. You may exercise your right to delete by submitting the Webform. Once you have submitted your request, you will receive an automated acknowledgment of your request. If you do not receive confirmation of your request, please resubmit your form or contact us. After verifying your identity, we will process your request. Deletion requests may take up to 45 days to process.

C. Right to Opt-Out of the Sale of Your Personal Information

We may sell your personal information to third parties, as defined broadly under the CCPA and further described within this policy. You have the right, at any time, to direct us not to sell your personal information by clicking the following link: Do Not Sell my Personal Information.

II. Collection, Disclosure, and Selling of Personal Information

A. Categories of Personal Information We Collect

We have collected the following categories of personal information during the previous twelve (12) months:

1. identifiers and contact information;
2. commercial information;
3. Internet network activity information;
4. geolocation data;
5. audio information;
6. professional or employment-related information; and
7. inferences resulting from information referenced under categories 1-6.

The personal information we collect is described further in Section 2 of our Privacy Policy, which you should review in addition to the above list.

B. Categories of Sources from Which We Collect

We collect personal information from the following categories of sources during the previous twelve (12) months:

1. Nearmap users and customers;
2. service providers;
3. advertising and marketing entities;
4. third-party social media websites, applications, or services;
5. other users;
6. Nearmap partners; and
7. related companies, including our parent corporation, Nearmap Ltd and its subsidiaries and/or affiliates (hereinafter “Related Companies”).

Additional information about these categories is provided in Sections 2 and 6 of our Privacy Policy.

C. The Business or Commercial Purpose for Which We Collect or Sell Personal Information

Nearmap has collected and sold personal information for the following business and commercial purposes during the previous twelve (12) months:

1. auditing;
2. security;
3. debugging to identify, prevent, and repair errors;
4. short-term transient use;
5. performing and obtaining services;
6. undertaking internal research for technological development;
7. improving and maintaining quality of service; and
8. commercial purposes such as marketing, advertising, and analytics.

Additional information can be found in Sections 2 and 3, 6, and 7 of our Privacy Policy.

D. Categories of Third Parties with Which We Share Personal Information

Over the past twelve (12) months, Nearmap has shared personal information with the below categories of third parties:

1. service providers relating to website hosts, data storage, project management, customer relations, subscription management, communications management, document management, data analytics, payment and accounting processes, customer verifications, privacy and security, and marketing;
2. advertising and marketing companies;
3. data analytics companies;
4. Nearmap partners; and
5. Related Companies.

Additional information about these categories is provided in Section 4 of our Privacy Policy.

E. Disclosures of Personal Information for a Business Purpose

In the preceding twelve (12) months, Nearmap has disclosed certain data from the following categories of personal information for one or more business purposes:

1. identifiers and contact information;
2. commercial information;
3. Internet or other activity information;
4. geolocation data;
5. audio information;
6. professional or employment-related information; and
7. inferences resulting from information referenced under categories 1-6.

F. Categories of Personal Information Sold

The CCPA requires that we provide transparency about personal information we sell, which for the purposes of the CCPA means scenarios in which Nearmap has shared personal information with third parties in exchange for money or valuable consideration. Under the CCPA’s broad definition of “sale”, Nearmap has sold the following categories of personal information during the previous twelve (12) months:

1. identifiers and contact information;
2. commercial information;
3. Internet or other activity information;
4. geolocation data;
5. audio information;
6. professional or employment-related information; and
7. inferences resulting from information referenced under categories 1-6.

III. Other CCPA Rights

A. Minor’s Privacy

We do not knowingly collect, maintain, or use personal information from minors under 16 years of age, and no part of Nearmap’s website is directed to minors under the age of 16. If you learn that your child has provided us with personal information without your consent, you may alert us at privacy.officer@nearmap.com or +1 (888) 914-9661 (PIN: 351216). If we learn that we have collected any personal information from minors under 16, we will promptly take steps to delete such information and terminate the minor’s account.

B. Nondiscrimination

If you exercise any of your rights under the CCPA, you have the additional right not to be discriminated against, including by our (a) denying you goods or services, (b) charging you different prices or rates, including through the use of discounts or imposing penalties, (c) providing you a different level or quality of goods or services, or (d) suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services. We may, however, offer you a different price, rate, level, or quality of goods or services if the differential treatment is reasonably related to value provided to us by your data.