CALIFORNIA CONSUMER PRIVACY ACT NOTICE
Last Updated: April 22, 2025
This California Consumer Privacy Act Notice (“CCPA Notice”) explains how Heron HR and its subsidiaries and affiliates (collectively, “Heron HR,” “we,” “us,” or “our”) may collect, use, disclose, and otherwise process personal information as described in this CCPA Notice. This CCPA Notice applies only to California residents whose personal information is subject to the California Consumer Privacy Act of 2018, as amended (“CCPA”). This CCPA Notice supplements our Privacy Policy available at www.heronhr.co.
This CCPA Notice does not apply to personal information we collect from our employees, job applicants, contractors, or similar individuals in the employment context (“Workforce Members”). If you are a Workforce Member who is a California resident, please see our California Employee Privacy Notice for more information about how we process your personal information. If you have any questions about this CCPA Notice, please contact us using the information in the “Contact Us” section below.
CCPA Definitions
The CCPA defines “personal information” as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. This CCPA Notice also uses the term “personal information” to include “sensitive personal information,” another defined term under the CCPA. For clarity, when we use the term “personal information” in this CCPA Notice, it includes sensitive personal information unless otherwise stated.
The CCPA does not apply to certain personal information, such as information subject to certain federal and state privacy laws, including the Gramm-Leach-Bliley Act, the Health Insurance Portability and Accountability Act, and the California Financial Information Privacy Act, or information that is not collected in the context of an individual acting as a consumer, employee, or business contact. In addition, the CCPA contains certain exemptions, such as an exemption for information about Workforce Members.
Personal Information We Collect
We may collect the following categories of personal information from and about California residents, depending on how they interact with us. We have collected these categories of personal information in the preceding twelve (12) months:
Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
Personal Information Categories Listed in the California Customer Records Statute (Cal. Civ. Code § 1798.80(e)), such as name, signature, address, telephone number, employment, employment history, bank account number, credit card number, debit card number, or other financial information. Some personal information in this category may overlap with other categories.
Protected Classification Characteristics Under California or Federal Law, such as age, race, national origin, citizenship, marital status, sex, veteran or military status.
Commercial Information, such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or Other Electronic Network Activity Information, such as browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.
Geolocation Data, such as general location data based on your device or IP address.
Professional or Employment-Related Information, such as current or past job history or performance evaluations.
Inferences Drawn from Other Personal Information, such as profiles reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Sensitive Personal Information, such as:
Social security, driver’s license, state identification card, or passport number.
Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.
Racial or ethnic origin, religious or philosophical beliefs, or union membership.
The contents of a consumer’s mail, email, and text messages unless Heron HR is the intended recipient of the communication.
Personal information collected and analyzed concerning a consumer’s health.
Sources of Personal Information
We may collect personal information from the following categories of sources:
Directly from You, such as when you create an account on our website www.heronhr.co, fill out a form, make a purchase, contact us, or otherwise communicate with us.
Automatically from You, such as when you browse our website or use our services, we collect certain information through cookies, web beacons, and similar technologies as described in our Privacy Policy at www.heronhr.co.
From Third Parties, such as:
Service providers, vendors, or contractors acting on our behalf.
Business partners with whom we offer co-branded services or engage in joint marketing activities.
Advertising networks, analytics providers, or social media platforms.
Publicly available sources, such as government databases or public records.
Other users who provide information about you, such as through referrals or testimonials.
Purposes for Collecting, Using, or Disclosing Personal Information
We may collect, use, or disclose personal information for one or more of the following business or commercial purposes:
To fulfill the purpose for which you provided the information, such as to process your requests, provide services, or respond to your inquiries.
To operate, maintain, and improve our website www.heronhr.co, products, and services.
To personalize your experience, such as by providing tailored content or recommendations.
To communicate with you, including sending promotional materials, newsletters, or alerts about our products or services.
To perform analytics, monitor usage, and understand trends to enhance user experience.
To comply with legal obligations, enforce our terms, or protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others.
To conduct marketing, including targeted advertising or retargeting through third-party services.
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.
To verify your identity or prevent fraud or other unauthorized or illegal activity.
We will not collect additional categories of personal information or use personal information for materially different purposes without providing you notice.
Disclosures of Personal Information
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
Identifiers
Personal Information Categories Listed in the California Customer Records Statute
Protected Classification Characteristics
Commercial Information
Internet or Other Electronic Network Activity Information
Geolocation Data
Professional or Employment-Related Information
Inferences Drawn from Other Personal Information
Sensitive Personal Information
We may disclose your personal information to the following categories of recipients:
Service Providers and Contractors, such as those that provide hosting, analytics, payment processing, customer service, or marketing services, who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
Business Partners, such as those with whom we engage in joint marketing or co-branded services.
Affiliates, such as our subsidiaries or parent companies, for purposes consistent with this CCPA Notice.
Third Parties in a Business Transfer, such as in connection with a merger, acquisition, or sale of assets.
Government Entities or Law Enforcement, when required by law or to protect our rights or those of others.
Other Third Parties, with your consent or at your direction, such as when you choose to share information via social media platforms.
Sales or Sharing of Personal Information
In the preceding twelve (12) months, Heron HR has not sold personal information as defined under the CCPA. However, we may “share” personal information, as defined under the CCPA, for cross-context behavioral advertising (e.g., targeted advertising). The categories of personal information we may share include:
Identifiers
Internet or Other Electronic Network Activity Information
Inferences Drawn from Other Personal Information
We may share these categories with advertising networks, analytics providers, or social media platforms to deliver targeted advertisements. You have the right to opt out of such sharing as described in the “Your CCPA Rights” section below.
Retention of Personal Information
We retain personal information for as long as necessary to fulfill the purposes outlined in this CCPA Notice, unless a longer retention period is required or permitted by law. The criteria used to determine retention periods include:
The length of time we have an ongoing relationship with you.
Whether there is a legal obligation to which we are subject (e.g., recordkeeping requirements).
Whether retention is advisable in light of our legal position (e.g., litigation or regulatory investigations).
Your CCPA Rights
As a California resident, you have the following rights under the CCPA, subject to certain exceptions and limitations:
Right to Know: You have the right to request that we disclose certain information about our collection, use, disclosure, or sale/sharing of your personal information over the past twelve (12) months. This includes:
The categories of personal information we collected about you.
The categories of sources from which the personal information was collected.
The business or commercial purpose for collecting, selling, or sharing personal information.
The categories of third parties with whom we disclose personal information.
The specific pieces of personal information we collected about you (subject to verification).
Right to Delete: You have the right to request that we delete personal information we collected from you, subject to certain exceptions (e.g., where retention is required by law or necessary to complete a transaction).
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To opt out, please visit www.heronhr.co and follow the instructions in our Privacy Policy or submit a request via the contact methods below.
Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to certain purposes permitted by the CCPA. To exercise this right, please contact us as described below.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights, such as by denying goods or services, charging different prices, or providing a different level or quality of goods or services.
How to Exercise Your CCPA Rights
To exercise your Right to Know, Right to Delete, Right to Correct, Right to Opt Out, or Right to Limit Use and Disclosure of Sensitive Personal Information, please submit a request by:
Emailing us at privacy@heronhr.co.
Visiting www.heronhr.co and following the instructions in our Privacy Policy.
Calling us at [Insert Phone Number, if applicable].
We will need to verify your identity before processing your request. To do so, we may ask you to provide certain information, such as your name, email address, or other identifiers, to match with our records. If we cannot verify your identity, we may deny your request in whole or in part. You may also designate an authorized agent to make a request on your behalf by providing written permission and verifying your identity.
Response Timing and Format
We aim to respond to verifiable consumer requests within forty-five (45) days of receipt. If we require additional time (up to ninety (90) days), we will inform you of the reason and extension period in writing. We will deliver our response electronically or by mail, at your option. Any disclosures will cover the twelve (12)-month period preceding the request. If we cannot comply with your request, we will explain the reasons in our response.
Contact Us
If you have questions or concerns about this CCPA Notice or our privacy practices, please contact us at:
Heron HR
Email: support@heronhr.co
Website: www.heronhr.co
Address: 110 Marter Ave, Suite 210, Moorestown NJ 08057
Changes to This CCPA Notice
We may update this CCPA Notice from time to time to reflect changes in our practices or legal requirements. We will post the updated CCPA Notice on our website www.heronhr.co with the “Last Updated” date at the top. We encourage you to review this CCPA Notice periodically.