Privacy Policy

Last updated December 10, 2024

This Privacy Policy for RNN Group Inc. (“we”, “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) consumer personal information. It also describes the rights and choices you have with respect to that information.

Any users of the services addressed by this policy will be referred to as “consumers.”

For purposes of this Privacy Policy, the term Information shall mean to include “personal data” and “sensitive personal data” as they are defined under applicable U.S. state privacy laws. You should know that U.S. state privacy laws may exclude publicly available, deidentified, and aggregated information; information subject to the Fair Credit Reporting Act (FCRA), Gramm Leach Bliley Act (GLBA), Health Insurance Portability and Accountability Act (HIPAA), and Driver’s Privacy Protection Act (DPPA); or information that is otherwise exempted or excluded by these same state privacy laws.

RNN Group Inc., its services and its website are not intended to be used by any minors under 18 years of age. If you are under the age of 18, you need a parent’s permission to use or access any of our services or websites. If you believe that RNN Group Inc. has mistakenly obtained data or information from a minor under the age of 18, please let us know by filling out a correction form at Manage Your Personal Data – RNN Group.

To the extent that RNN Group Inc. sells or discloses patient Information which is exempt under HIPAA in certain states, it does so pursuant to the deidentification methodology as defined by, and required under these laws. In accordance with applicable laws, RNN Group Inc. is committed to securely maintaining and using deidentified data in accordance with these laws.

1. What Information do we collect, why and with whom?

We collect categories of Information as identified in the chart below. In the past 12 months, we have disclosed and sold Information to third parties for permissible business or commercial purposes.

Category Collected Sold / Shared / Disclosed Permissible Business or Commercial Purpose With Whom?
Personal Identifiers
(first & last name, address, phone number,
social security number, etc.) 		Yes Yes • Analytics
• Decisioning
• Fraud and identity theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery
• Improving our services
• Legal compliance 		• Business to Business Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Government Agencies
• Other Authorized Data Compilers
• Regulatory Authorities or Law Enforcement
• Technology/Computer Software Companies
Protected classification records under state or federal law
(gender, age, date of birth, marital
status, etc) 		Yes Yes • Analytics
• Decisioning
• Fraud and identity theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery
• Improving our services
• Legal compliance 		• Business to Business Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Government Agencies
• Other Authorized Data Compilers
• Regulatory Authorities or Law Enforcement
• Technology/Computer Software Companies
Commercial/Transaction Info
(property records, vehicle info., etc) 		Yes Yes • Analytics
• Decisioning
• Fraud and identity theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery
• Improving our services
• Legal compliance 		• Business to Business Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Government Agencies
• Other Authorized Data Compilers
• Regulatory Authorities or Law Enforcement
• Technology/Computer Software Companies
Internet or Network Activity
(browsing history, online behaviors, etc) 		No No
Biometric Information
(fingerprints, retina scans, etc) 		No No
Geological Data
(device location) 		No No
Audio, Electronic, Sensory Data
(audio, video, call recordings, etc) 		No No
Professional or Employment-Related Information
(job title, employer, work history, etc) 		Yes Yes • Analytics
• Decisioning
• Fraud and identity theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery
• Improving our services
• Legal compliance 		• Business to Business Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Government Agencies
• Other Authorized Data Compilers
• Regulatory Authorities or Law Enforcement
• Technology/Computer Software Companies
Education Information
(student records, directory info, etc) 		Yes Yes • Analytics
• Decisioning
• Fraud and identity theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery
• Improving our services
• Legal compliance 		• Business to Business Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Government Agencies
• Other Authorized Data Compilers
• Regulatory Authorities or Law Enforcement
• Technology/Computer Software Companies
Inferences Drawn From Collected Info
(info collected is used to build a profile,
predict preferences or characteristics) 		Yes Yes • Analytics
• Decisioning
• Fraud and identity theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery
• Improving our services
• Legal compliance 		• Business to Business Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Government Agencies
• Other Authorized Data Compilers
• Regulatory Authorities or Law Enforcement
• Technology/Computer Software Companies
Sensitive Personal Information
(social security, driver’s license,
state ID card or passport numbers, etc) 		Yes Yes • Analytics
• Decisioning
• Fraud and identity theft prevention and protection
• Commercial credit reporting
• Research and development
• Debt recovery
• Improving our services
• Legal compliance 		• Business to Business Companies
• Business Services/Agency
• Consumer Services Companies
• Educational Institutions & Companies
• Energy and Utility Companies
• Financial Services Companies
• Government Agencies
• Other Authorized Data Compilers
• Regulatory Authorities or Law Enforcement
• Technology/Computer Software Companies

2. What are your rights?

Residents of specific states have certain rights with respect to Information collected and processed under U.S. state privacy laws. Subject to certain exceptions and limitations, you may exercise the following rights at any time:

Right to Know/Access

You have a right to know and access the personal information that RNN Group Inc. maintains about you. The information required to be disclosed includes the categories of personal information collected, shared, sold, or disclosed; the categories of sources; the business or commercial purpose for collecting, selling, or sharing the personal information, the categories of third parties to whom RNN Group Inc. shared, sold, or disclosed the personal information, and the specific pieces of personal information that RNN Group Inc. has collected about you.

Right to Delete

You have the right to request deletion of the personal information that RNN Group Inc. has obtained or maintains about you, subject to certain exceptions.

Right to Correct

You have the right to request correction of inaccurate personal information that RNN Group Inc. maintains about you.

Right to Opt-Out

You have the right to exercise control over the processing of certain personal information. This includes the right to opt out from the sale, sharing, processing, and use of personal information for sales, certain profiling or targeted advertising, and from the use of sensitive personal information. Opting out also includes your right to limit generation, use, and disclosure of sensitive personal information. You can choose to opt-out of the sale, and/or opt out of processing of data for targeted advertising, and certain profiling activities and limit the use of your sensitive information.

Right to Non-Discrimination

You have the right not to be discriminated against for exercising any of your consumer rights granted by applicable U.S. state privacy laws.

Right to Portability

You have the right to obtain a copy of personal information RNN Group Inc. maintains about you in a format that is portable and readily usable.

Right to Appeal

You have the right to appeal RNN Group Inc.’s decision regarding the consumer’s request. To appeal a declined request, please email fastresponse@rnngroup.com. If you are a California resident and not satisfied with our response to your appeal request, you may contact the California Privacy Protection Agency.

How to Exercise Your Rights

To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:

Please note, to exercise your rights to know, correct, and/or delete, we will, at a minimum, need your complete name and mailing address. You may also include any name variations, email addresses, and telephone numbers that may be associated with you. Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. The type of additional information will vary by request.

In certain circumstances, we may decline a request to exercise the right to know and/or right to deletion, particularly where we are unable to verify your identity.

Authorized Agent

You may designate an authorized agent to make a request on your behalf through the designated methods set forth in this privacy policy where we can verify the authorized agent’s authority to act on your behalf.

For requests to opt-out of sales and sharing, or to limit use and disclosure of sensitive personal information, you may designate an authorized agent by submitting a written and signed permission designating such an agent. For requests made by an opt-out preference signal, written permission from the consumer will not be needed.

For requests to know/access, requests to delete, and requests to correct personal information: (i) receiving a power of attorney valid under the laws of your state from you or your authorized agent; or (ii) receiving sufficient evidence to show that you have: (a) provided the authorized agent signed permission to act on your behalf; (b) verified your own identity directly with us pursuant to the instructions set forth in this privacy policy; and (c) directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf. This may be done by mailing two forms of identification showing your first name, last name, and current address and a signed authorization allowing an agent to request information on your behalf.

3. How long do we keep your Information?

We will keep your personal information only as long as we need it for permissible business or commercial uses, to fulfill legal or contractual obligations, to continue to provide products and services you sign up for or only as long as necessary to fulfill the purposes outlined in this privacy policy. We may also keep it to comply with our legal obligations, resolve any disputes, protect against fraudulent, deceptive, or illegal activity, and enforce our rights. These reasons can vary from one data type to another and depend on the permissible purpose for such Information.

4. Annual User Rights Request Metrics

Under the CCPA, if RNN Group Inc. processes the personal information of 10 million or more California residents annually, we are required to disclose metrics about data subject access requests from California residents for the previous calendar year. As of the date of this Privacy Policy, RNN Group Inc. does not yet meet the threshold requirements. If and when we meet these threshold requirements, we will post the changes on this page. You may wish to visit this page periodically to learn of any updates.

If you have any other questions regarding this policy or RNN Group Inc.’s practices you may reach us: