CCPA is recognized as a leading standard for data privacy and consumer protection of residents of the state of California in the United States.
Why is California Consumer Privacy Act (CCPA) Important to Alohi?
The CCPA is crucial for Alohi because it guides us in protecting the privacy and rights of our California-based users. By diligently implementing the required legal, technical, and organizational measures, we ensure comprehensive compliance with its provisions. Adhering to the CCPA showcases a commitment to consumer privacy, builds trust with customers, and ensures compliance with stringent regulations.
Our Storage Location
At Alohi, we take your privacy seriously, ensuring strong protection that meets European CCPA standards for both individuals and businesses using our service. We keep your personal information safe in our Swiss data center, which follows strict privacy laws set by Switzerland.
For our Alohi Suite Enterprise plan users, we offer the option to store their data securely, fully encrypted, in different locations to comply with local data residency laws.
Using our Services
Alohi is dedicated to keeping your data safe and private. We only collect the personal data we really need to provide our services and we never sell it. Personal data is shared with third parties only for contract processing and service fulfillment. As a user, the CCPA gives you several rights over your data:
Right to be informed: You deserve to know what information we collect, why we collect it, and how we use it. We're all about being open and giving you choices.
Right to deletion: If you want us to erase your data, just let us know. Whether you have an account with us or just gave us your data in the past, we can help remove it.
Right to opt-out of data sale: You have the option to stop the sale of your personal information. However, at Alohi, selling personal data isn't part of our practice, so you're already covered—there's no need for you to take any action.
Right to non-discrimination: Your rights are important to us. Exercising your privacy rights, like opting out or requesting data deletion, will never lead to unfair treatment by Alohi. We guarantee to treat all your choices with respect and fairness.
Processing of User Data
At Alohi, we handle your personal information carefully, including:
Registering you for the Alohi products and services you choose.
Providing you with technical support.
Improving how our services work for you.
Handling payments, including regular ones you've set up.
Delivering the products and services you've asked for.
Keeping you informed about significant changes or updates to our products and services.
We process your personal information with the following principles in mind:
Being lawful, fair, and transparent in how we use your data.
Purpose limitation – using your data only for specific reasons we've told you about.
Data minimization – collecting and processing only necessary data.
Keeping your data accurate and up to date.
Protecting the integrity and confidentiality of your data, ensuring it's safe during transmission, use, and storage.
Being accountable and able to show how we comply with these principles, in line with CCPA requirements.
Frequently Asked Questions
Can specific business units within an organization be CCPA compliant independently?
No, CCPA compliance is assessed at the organization level, requiring a holistic approach to consumer data privacy across all business units.
What is the typical timeframe for achieving CCPA compliance?
Achieving CCPA compliance can vary widely but usually takes several months, depending on the organization’s readiness and the complexity of its data processes.
Does CCPA compliance require ongoing efforts after initial certification?
Yes, CCPA compliance involves ongoing efforts, including regular reviews of data handling practices and updates to privacy policies and procedures.
How does CCPA compliance intersect with other privacy regulations?
CCPA compliance can complement other privacy regulations by enhancing data privacy practices, but organizations must still ensure they meet all specific requirements of other applicable laws.