California Privacy Notice

Last modified: February 25, 2020

The information provided in this "California Privacy Notice" section only applies to California residents and supplements Looker's master Privacy Policy, which is available at looker.com/privacy.

This notice describes how we collect, use and share your Personal Information, and your rights with respect to that Personal Information, and is effective as of January 1, 2020.

"Personal Information" has the meaning given in the California Consumer Privacy Act of 2018 (CCPA) but does not include information exempted from the scope of the CCPA.

Notice Regarding Sale of Your Personal Information

Looker respects your data as a customer and user of the Looker Product and Services, which are described in the Master Service License Agreement ("MSLA"). We do not sell your information, including personal information, in the provision of our Products and Services. However, your Personal Information, such as cookie ID, online profile, or business contact information, may be sold by certain third parties who receive it from us. You may opt-out of these sales of marketing information by clicking the link "Do not sell my personal information" to update your opt-out and other privacy preferences.

Your California Privacy Rights

As a California resident, you have the rights listed below. However, these rights are not absolute, and we may be able to decline your request in accordance with the CCPA.

Right to Know About Personal Information Collected, Disclosed, or Sold.
Consumers have the right to request that Looker disclose what personal information we collect, use, disclose, and sell. Refer to the section How We Collect and Share Your Personal information for additional details. You can request the following information about how we have collected and used your Personal Information during the past 12 months:
- The categories of Personal Information that we have collected.
- The categories of sources from which we collected Personal Information.
- The business or commercial purpose for collecting and/or selling Personal Information.
- The categories of third parties with whom we share Personal Information.
- Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information received by each category of recipient.
- Whether we've sold your Personal Information, and if so, the categories of Personal Information received by each category of recipient.
Access. You can request a copy of the Personal Information that we have collected about you during the past 12 months.
Right to Request Deletion of Personal Information. You can ask us to delete the Personal Information that we maintain about you.
Right to Opt out of the Sale of Personal Information. If we sell your Personal Information, you can opt-out. In addition, if you direct us not to sell your Personal Information, we will consider it a request pursuant to California's "Shine the Light" law to stop sharing your personal information covered by that law with third parties for their direct marketing purposes.
- Looker does not knowingly collect information of children. However, if you are less than 16 years old, we will ask for your permission (or if you are less than 13 years old, your parent or guardian's permission) to sell your Personal Information before we do so.
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination. This means that we will not penalize you for exercising your rights by taking actions such as:
- Denying you goods or services,
- Increasing the price/rate of goods or services,
- Decreasing our service quality, or
- Suggesting that we may penalize you as described above for exercising your rights.

However, the CCPA allows us to charge you a different price or provide a different service quality if that difference is reasonably related to the value of the Personal Information we are unable to use.

How to Exercise Your California Privacy Rights

You may exercise your California privacy rights to access and be informed, request deletion, and/or opt out of the sale of your personal information by submitting a verifiable consumer request when you:

visit looker.com/trust-center/privacy/requests to submit a request via webform
click the link "Do not sell my personal information" that appears on Looker.com webpages
email privacy@looker.com

You may also make a request on behalf of your child under 13. We will respond to your request within 45 days, unless additional time is required, and then we will respond within 90 days. We may confirm your request directly with you prior to fulfilling your request. We will need to confirm your identity and California residency to process your requests to exercise your information, access or deletion rights. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

Right to opt out of sales

In addition, you can opt out of the sale of your Personal Information by clicking the "Do Not Sell My Personal Information" button at the bottom of any page that collects your information.

Authorized Agents

If you are using an authorized agent to exercise your rights, Looker may require that you:

Provide the authorized agent written permission designating them to submit the request on your behalf; and
Verify your own identity directly with Looker.

Looker reserves the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf.

Verifying Your Identity

Looker, or third-party identity verification service, will need to confirm your identity in order to respond to your request. When possible, we will match the identifying information that you provide in your request to the information that we maintain about you. In some circumstances, such as requests related to the Looker Certified Program, we may request that you login to your account or provide government issued identification in order to process your request or the request of an authorized agent. If we do require additional information from you, it will be retained to the extent needed to verify your request.

We may need to contact you in order to clarify your request, confirm your identity, or collect more information in order to verify and respond to your request. If we are unable to verify your identity, Looker will not disclose any specific pieces of personal information to you and will inform you that we cannot verify your identity. In the event your request is denied in whole or in part, we will inform you of the reason for such denial.

When responding to privacy requests to know or delete, we may not be able to provide information on or delete your personal information related to online activity because Looker does not know your identity with the degree of certainty and does not maintain individualized information from third party cookies.

The chart below summarizes our collection, use and sharing of Personal Information during the last 12 months before the effective date of this Privacy Policy. We describe the sources through which we collect and the purposes for which we collect, use and share your Personal Information in How We Collect and Share Your Personal information.

Potential Business Purposes

Auditing interactions, including, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this and other standards.
Security, including detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
Debugging to identify and repair errors that impair existing intended functionality.
Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, or related services.
Internal research for technological development and demonstration.
Maintain or enhance the quality of products and services.
Other related purposes including, but not limited to, providing customized ads.

Looker's Products and Services

Personal Information obtained from the customer or consumer for providing Looker Products and Services may be shared with certain vendors in order to provide the Products and Services requested by those customers and consumers. Looker does not and will not sell this information. Please refer to our current list of subprocessors: looker.com/trust-center/privacy/subprocessors

Additionally, Looker may use or share the Personal Information provided in order to fulfill Looker's Business Purposes, including to detect or prevent fraud and provide other support.

The Looker Platform and Related Services for Customers

Looker is a Service Provider to its customers. The customer is in control (as with GDPR) of determining when or if they will honor the CCPA request. The process to delete the personal information of users is described in this doc: looker.com/admin-options/tutorials/delete-user.

Other Services for Consumers

Looker, as a Business, collects and uses Personal information about consumers of Looker's other services, which includes the exam data for participants in the Looker Certification Program, in order to provide the services requested. For additional information, visit the Looker Certification Program: looker.com/certification.

Looker's Websites and Marketing Activities

Looker and Third Parties may place cookies and other related technology on Looker's website. Third parties may then share the information collected by that cookie with other businesses for a commercial purpose. For additional information, refer to Looker's Cookie Policy (Website): cloud.google.com/terms/looker/privacy/cookies/cookie-policy-platform

Additionally, Looker collects the Personal Information of individuals as part of our marketing activities, including when you complete a form on our Websites, participate in promotional activities, contact us or otherwise engage with our company, and also from other marketing sources.

In the preceding 12 months, Looker has shared personal information with third parties for the following purposes.

We may use your personal information collected in the Looker Products and Services, including the Platform and related services, such as learning and customer support:
Categories of Personal Information Collected	Categories of Sources of Personal Information	Purposes, Including Business Purposes for Looker Using or Disclosing Personal Information	Categories of Third Parties with whom Looker shares Personal Information
Personal Information contained in Customer Records	Looker's Customers	In order to perform the service requested	Subprocessors
Professional or employment-related related information		Performing services on behalf of the customer Auditing related to a current interaction Debugging Security detection and protection against fraud or illegal activity and prosecution of those responsible Activities to verify or maintain the quality of a service Short term, transient use
Geolocation (to the extent that general regions may be used with a mapping tool)
Internet/online activity	Looker Analytics vendors	Internal research for product improvement

We may use the following categories of your personal information collected for the Other Services, including the Looker Certification Program:
Categories of Personal Information Collected	Categories of Sources of Personal Information	Purposes, Including Business Purposes for Looker Using or Disclosing Personal Information	Categories of Third Parties with whom Looker shares Personal Information
Identifiers	Consumer (Examinee)	Performing services on behalf of the customer Auditing related to a current interaction Debugging Security detection and protection against fraud or illegal activity and prosecution of those responsible Activities to verify or maintain the quality of a service Internal research for product improvement Short term, transient use	Subprocessors Social media (only to the extent the Examinee actively enables sharing of certification badge)
Internet/on-line activity
Professional or employment-related related information
Personal Information contained in Customer Records (to the extent that the testing service collects payment information)
Other sensory information (to the extent video and keystroke logging are recorded)
Protected class characteristics (to the extent an examinee requests accommodation)

We may use the following categories of your personal information collected on our Websites, for our marketing efforts, and for our Community activities, Partner Program, and events:
Categories of Personal Information Collected	Categories of Sources of Personal Information	Purposes, Including Business Purposes for Looker Using or Disclosing Personal Information	Categories of Third Parties with whom Looker shares Personal Information
Identifiers	Looker's Customers Consumers Looker Marketing and sales vendors and partners	Performing services on behalf of the customer Auditing related to a current interaction Debugging Security detection and protection against fraud or illegal activity and prosecution of those responsible Activities to verify or maintain the quality of a service Internal research for product improvement Short term, transient use	Marketing and sales partners Security and other operations vendors Event sponsors
Professional or employment-related information	Customers Consumers Marketing and sales vendors and partners Event sponsors
Internet/on-line activity on Looker.com websites	Consumers Looker Digital marketing vendors		Digital marketing vendors and partners
Categories of Personal Information Collected	Categories of Sources of Personal Information	Commercial Purposes for Looker Using or Disclosing Personal Information	Categories of Third Parties with whom Looker shares Personal Information
Internet/on-line activity on Looker.com websites*	Consumer Third party cookie providers*	We may receive or "sell" your Personal Information under California law for analytics, marketing purposes.**	Third party cookie providers*

*See our Cookie Policy for a list of our third party analytics, marketing, and advertising vendors and partners.

**Notice: This information may be further sold by these vendors and partners, unless you opt-out of a sale.

Contact for More Information

If you have questions or concerns about Looker's privacy policies and practices, you may contact us by emailing privacy@looker.com.

Glossary

Category	Definition/Description (categories may overlap)
Authorized Agent	A consumer may authorize another person to exercise their right to know, delete, or to opt-out of the sale of the consumer's personal information on the consumer's behalf. An authorized agent may be a natural person or a business entity that is registered with the California Secretary of State.
Biometric Information	A person's physiological, biological or behavioral characteristics, including their DNA, that can be used alone or combined with other information to identify a person. Biometric information includes, but is not limited to, images of a person's iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.
Business Purpose	Business purposes are: Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Debugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, including contextual customization of ads as a part of the engagement. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service, and to improve, upgrade, or enhance the service.
Commercial Information	Records of personal property, Offerings purchased, obtained, or considered, financial information, or other purchasing or consuming histories or tendencies.
Geolocation Data	For example, your precise location derived from GPS coordinates or telemetry data.
Identifiers	Name, alias, postal address, unique personal identifier, customer number, email address, account name, social security number, driver's license number, passport number, insurance policy number, bank account number, or other similar identifiers.
Inferences	The derivation of information, data, assumptions, or conclusions from any of the above categories of Personal Information to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes.
Internet or Network Information	Browsing history, search history, and information regarding a consumer's interaction with an Internet website, application, or advertisement.
Online identifiers	An online identifier or other persistent identifier that can be used to recognize a consumer, family or device, over time and across different services, including but not limited to, a device identifier; an Internet Protocol address; cookies, beacons, pixel tags, mobile ad identifiers, or similar technology; customer number, unique pseudonym, or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers (i.e., the identification of a consumer or a device to a degree of certainty of more probable than not) that can be used to identify a particular consumer or device.
Professional or Employment-Related Information	This term is not defined in the CCPA, but likely includes any information relating to a consumer's current, past or prospective professional experience (e.g., job history).
Protected Classification Characteristics	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Sensory Information	Audio, electronic, visual, thermal, olfactory, or similar information.