Information We Collect

Savista collects information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (personal information).

In particular, the Company has collected or disclosed the following categories of personal information about its consumers within the last twelve (12) months:

Category	Examples	Collected	Sold or Shared	Disclosed for Business Purpose	To whom we disclosed personal information
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.	YES	YES	YES	Services providers that support our business such as website developers, infrastructure providers, auditors and consultants Marketing partner to manage and deliver advertising and understand your preferences. We may share information that does not directly identify you (e.g., your IP address, or other information associated with your online browsing activities) for our advertising and marketing efforts
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES	NO	YES	Outside organizations in connection with providing services, completing transactions, supporting our everyday operations, or business management and development Representatives of California residents Government agencies Outside companies in connection with routine or required reporting
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO	N/A	N/A	Outside organizations in connection with providing services, completing transactions, supporting our everyday operations, or business management and development Representatives of California residents Government agencies Outside organizations in connection with human resource activities and workforce management Outside companies in connection with routine or required reporting
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES	YES	YES	Outside organizations in connection with providing services, completing transactions, supporting our everyday operations, or business management and development
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO	N/A	N/A	N/A
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	YES	YES	NO	Marketing partner to manage and deliver advertising and understand your preferences. We may share information that does not directly identify you (e.g., your IP address, or other information associated with your online browsing activities) for our advertising and marketing efforts.
G. Geolocation data.	Physical location or movements.	YES	NO	YES	Outside organizations in connection with providing services, completing transactions, supporting our everyday operations, or business management and development
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO	N/A	N/A	N/A
I. Professional or employment-related information.	Current or past job history or performance evaluations.	YES	YES	YES	Outside organizations in connection with providing services, completing transactions, supporting our everyday operations, or business management and development
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO	N/A	N/A	N/A
K. Inferences drawn from other personal information.	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO	N/A	N/A	N/A
L. Sensitive Personal Information	A social security, driver’s license, state identification card, or passport number	NO	N/A	N/A	N/A
	Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account	NO	N/A	N/A	N/A
	Precise geolocation or any data that is derived from a device and that is used or intended to be used to locate a consumer within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet, except as prescribed by regulations	NO	N/A	N/A	N/A
	Racial or ethnic origin, religious or philosophical beliefs, or union membership	NO	N/A	N/A	N/A
	The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication	NO	N/A	N/A	N/A
	Genetic data	NO	N/A	N/A	N/A
	The processing of biometric information for the purpose of uniquely identifying a consumer.	NO	N/A	N/A	N/A
	Personal information collected and analyzed concerning a consumer’s health.	NO	N/A	N/A	Outside organizations in connection with human resource activities and workforce management (in connection with leave and disability accommodations)
	Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation.	NO	N/A	N/A	Internal only for purposes of reasonable accommodations

Personal information does not include:

Publicly available information from government records
Deidentified or aggregated consumer information
Information excluded from the CCPA/CPRA’s scope, like:
Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994 (DPPA).