California Consumer Privacy
Effective Date: November 2, 2023
This California Consumer Privacy Notice (“Notice”) applies to CoxCom, LLC and its communication related affiliates, (“Cox,” “us,” “we, “our”) and “Consumers” as defined by the California Consumer Privacy Act (as amended and together with related regulations the “CCPA”) and should be read along with our other privacy notices found on www.cox.com. In the event of a conflict between any other Cox policy, statement or notice and this Notice, this Notice will prevail as to California Consumers’ rights under the CCPA. There are other companies in the Cox corporate family that have their own California privacy notices and consumer rights programs. You will need to consult their policies and make requests to them separately.
This Notice applies to California Consumers that visit our sites or use our services. If you are a current employee or contractor (with CCI Systems access) of CCI, you may view our California Workforce Member Privacy Notice (Internal) under “Policies and Guidelines” through InsideCox. If you are a job applicant, you may view our California Applicant Privacy Notice by visiting the CCI Careers page here. If you are a former employee, retiree, beneficiary, dependent, former contractor, or current contractor (without CCI system access) of CCI, you may view our California Workforce Member Notice (External) by visiting our main page here. If you interact with Cox in your capacity of representing another business, you may view our California notice by visiting here.
We may from time-to-time update information in this Notice regarding our data practices and your rights, modify our methods for responding to your requests, or supplement our responses to your requests. You can tell when this Notice was last updated by looking at the Effective Date at the top of the Notice. Any changes to this Notice will become effective upon posting of the revised Notice on our sites. Use of the sites, any of our products and services, and/or providing consent to the updated Notice following such changes constitutes your acceptance of the revised Notice then in effect. Capitalized terms defined in the CCPA that are used in this Notice shall have the same meaning as in the CCPA.
This Notice contains a comprehensive explanation of our data practices and Consumer rights under the CCPA, but you can find a shorter explanation in our FAQs here.
You can click on the following links to navigate to the different sections in this Notice.
a. Categories of PI
b. Sources
c. Sensitive PI
4. Your California Privacy Rights
a. Right to Know
b. Opt-Out Rights
i. Exercising Opt-Out Rights
ii. Opt-Out Preference Signals
iii. Managing Cookie Preferences
c. Right to Delete
d. Right to Correct
e. Right to Limit Use of Your Sensitive PI
f. Non-Discrimination
g. Exercising Your CCPA Rights
5. Additional California Notices
a. Third Party Marketing
b. Online Privacy Practices
i. Online Tracking and Targeting
ii. California Minors
6. Contact Us
1. PI We Collect and Disclose
a. Categories of PI
The table below provides the categories of PI we Collect about California Consumers, examples of the PI we Collect, the business and commercial purposes for collecting and disclosing the PI, and the types of recipients we disclose PI with, in connection with our Business in the preceding twelve months as well as our current practices unless otherwise noted. Note that the examples of PI we Collect about you may vary depending on the nature of your interactions with us, and may not include all of the examples listed below.
Category of PI
Business Purposes for Collection and Disclosure
Categories of Recipients to whom PI is Disclosed for a Business Purpose
1. Identifiers
such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers
Collection
Disclosure
Advertising networks, data analytics providers, credit and collection agencies, marketing services companies, and call center vendors, field services technicians, security providers, and other similar types of vendors, and other Service Providers
2. Personal Records
(any personal information described in subdivision (e) of Section 1798.80 of the California Civil Code) such as telephone number, employment details, credit or debit card number, or other financial information
Collection
Disclosure
Data analytics providers, credit reporting agencies, e-signature services, marketing services companies, credit and collection agencies, call center vendors, field services technicians, security providers, and other similar types of vendors, and, and other Service Providers
3. Customer Characteristics
of protected classifications under California or federal law such as age, veteran status, accommodations information, gender and interests
Collection
Disclosure
Advertising networks, marketing services companies, data analytics providers, and other Service Providers
4. Customer Account Details / Commercial Information
such as products or services purchased, obtained, or considered, other purchasing or consuming histories or tendencies. This may also include information related to your interaction with our services, and other service-related data such as the amount of Internet data used by your household, cable and telephone service activity, TV viewership activity, and home security
Collection
Disclosure
Data analytics providers, marketing services companies, collection agencies, customer services providers, and other Service Providers
5. Internet or Other Electronic Network Activity Information
such as information regarding Internet or other similar activity, browsing history, your interactions with web sites, applications, or advertisements
Collection
Disclosure
Advertising networks, data analytics providers, marketing services companies, and other Service Providers
6. Geolocation Data
such as market location or movements
Collection
Disclosure
Data analytics providers, advertising networks, customer services providers, marketing services companies, and other Service Providers
7. Sensory Data
such as customer care and sales calls, electronic, visual, or similar information
Collection
Disclosure
Data analytics providers, marketing services companies, and other Service Providers
8. Professional or Employment Information
such as professional education, or employment-related information
Collection
Disclosure
Credit agencies, data analytics providers, marketing services companies, and other Service Providers
9. Inferences from PI Collected
such as creating a profile about a Consumer reflecting the Consumer’s characteristics, interests, and preferences
Collection
Disclosure
Data analytics providers, marketing services companies, and other Service Providers
In addition, each of the above referenced categories of PI may be shared with government agencies, other third parties as required by law or compelled by legal process, to the Consumer or other parties at the Consumer’s request, and to assignees as part of a merger or asset sale.
Further, we may deidentify or aggregate your PI, and as permitted by applicable law, we do not treat De-identified or Aggregate Consumer Information as PI. Similarly, as permitted by the CCPA, we may not treat publicly available data as PI.
b. Sources of PI
We Collect, and in the preceding twelve months have collected, PI directly from you, your devices or browser, vendors that assist us in providing our services and running our internal business operations, data analytics providers, advertising networks, suppliers, public databases, social media platforms, data enrichment services, other companies in the Cox family of businesses, and other data providers.
c. Sensitive PI
The table below provides the categories of Sensitive PI we Collect about California Consumers, the Business and Commercial Purposes for collecting the Sensitive PI, and the types of recipients we disclose Sensitive PI with, in connection with our Business in the preceding 12 months as well as our current practices unless otherwise noted. Note that the specific pieces of Sensitive PI we collected about you may vary depending on the nature of your interactions with us, and may not include all of the examples listed below.
Category of Sensitive PI
Categories of Sources from which Collected
Business and Commercial Purposes for Collection of Sensitive PI
Categories of Recipients with whom Sensitive PI is Disclosed
1. PI that reveals a Consumer’s social security, driver’s license, or passport number.
Directly from you
Credit bureaus and debt collection agencies
2. PI that reveals a Consumer’s precise geolocation
Service Providers
3. PI that reveals a Consumer’s racial or ethnic origin, religion, or immigration or citizenship status
Other data providers
Service Providers
4. PI that reveals a Consumer’s precise geolocation
Other data providers
Service Providers
5. PI that concerns a Consumer’s health
Other data providers
Service Providers
2. Retention of PI
The table below provides details regarding how long we retain the categories of PI and Sensitive PI we Collect. For each category of PI, our retention period is determined by the purposes for which we use the PI. However, we may retain PI longer than what is provided below if the PI Is subject to a legal action, requirement, or process.
Category of PI or Sensitive PI
Retention Period
(1) Identifiers
Different retention periods apply for the different types of data classified as an Identifier; the maximum retention period is for the life of the customer relationship with Cox + 84 months.
(2) Personal Records
Different retention periods apply for the different types of data classified as Personal Records; the maximum retention period is for the life of the customer relationship with Cox + 84 months.
(3) Customer Characteristics
Different retention periods apply for the different types of data labeled as Protected Classifications; the maximum retention period is for the life of the customer relationship with Cox + 84 months.
(4) Customer Account Details / Commercial Information
Different retention periods apply for the different types of data classified as Customer Account Details/Commercial Information; the maximum retention period is for the life of the customer relationship with Cox + 120 months.
(5) Internet or Other Electronic Network Activity Information
Different retention periods apply for the different types of data classified as Internet or Network Information; the maximum retention period is for the life of the customer relationship with Cox + 60 months.
(6) Geolocation Data
Different retention periods apply for the different types of data classified as Geolocation Data; the maximum retention period is for the life of the customer relationship with Cox + 60 months.
(7) Sensory Data
Different retention periods apply for the different types of data classified as Sensory Data; the maximum retention period is for the life of the customer relationship with Cox + 84 months.
(8) Professional or Employment-related Information
Different retention periods apply for the different types of data classified as Professional or Employment-related Information; the maximum retention period is for the life of the employment relationship with Cox + 72 months.
(9) Inferences from PI Collected
Different retention periods apply for the different types of data classified as Inferences from PI Collected, the maximum retention period is for the life of the customer relationship with Cox + 36 months.
(10) Sensitive PI
Different retention periods apply for the different types of Sensitive PI. For Sensitive PI that reveals a Consumer’s social security, driver’s license, or passport number, the maximum retention period is for the life of the customer relationship with Cox + 84 months.
For Sensitive PI that reveals a Consumer’s Precise Geolocation Data, the maximum retention period is for the life of the customer relationship with Cox + 84 months.
For Sensitive PI that reveals a Consumer’s racial or ethnic origin, the maximum retention period is for the life of the customer relationship with Cox + 84 months.
3. Selling and Sharing of PI
The table below provides the categories of PI we sold or shared with third parties for cross-context behavioral advertising in the preceding twelve (12) months. We disclose certain services activity information without your name, address, e-mail, phone number, or other contact information (“Viewership Data”) to third parties such as media measurement companies and TV programmers and permit them to use it for their own purposes. You may opt out of the Selling of this Viewership Data by exercising your opt out rights as disclosed below.
Category of PI or Sensitive PI
Sold?
Shared for Behavioral Advertising?
Purposes for Selling / Sharing
Categories of Third Parties to Whom Information Was Sold or Shared
1. Identifiers
Yes
Yes
Commercial purposes such as for TV viewership for advertisers
Advertising networks and providers, advertisers, measurement companies, and TV programmers
2. Customer Account Details / Commercial Information
Yes
Yes
Commercial purposes such as for TV viewership for advertisers
Advertising networks and providers, advertisers, measurement companies, and TV programmers
3. Internet or Other Electronic Network Activity Information
Yes
Yes
Commercial purposes such as advertising
Advertising networks and providers
4. Geolocation Data
No
Yes
Commercial purposes such as advertising
Advertising networks and providers
5. Sensitive PI
No
No
N/A
N/A
4. Your California Privacy Rights
To protect your privacy and comply with our obligations under the CCPA, requests you submit to us are subject to an identity and residency verification process as permitted or required by the CCPA. We will not fulfill your CCPA “Right to Know,” “Right to Delete,” or “Right to Correct” requests unless you have provided sufficient information for us to reasonably verify you are the Consumer about whom we collected PI (“Verifiable Consumer Request”). Please follow the instructions in our Privacy Center here and respond to any follow up inquires we may make. For Consumers that cannot be verified through their Cox account credentials, we require verification through a third-party service associated with a credit bureau that will ask you questions based on your consumer history in order provide us a sufficient degree of certainty that you are who you say you are. Otherwise, to protect your privacy, we will reject your request and refer you to this Notice for information on our data practices generally, and if you made a deletion request remind you how to exercise your opt-out rights.
We will make commercially reasonable efforts to identify Consumer PI that we Collect, use, and store in response to your California Consumer privacy rights requests. Some of the PI we Collect is voluminous, difficult to present to you, or generally not helpful, so we may provide a list of that PI and give you the opportunity to elect whether you want the rest or not. If you are a Cox customer or former customer, some of your PI is accessible to you through our self-service tools located in “My Account” on our website or is otherwise readily available to you without the need to make a Right to Know request. For instance:
If we determine that your request warrants a fee, or we refuse it, we will give you notice explaining why we made that decision. You will be provided a cost estimate and the opportunity to accept the incurring of fees before we will charge you for responding to your request.
We have no obligation to keep PI longer than we need it, or reidentify it, to respond to Consumer requests. This helps us practice data minimization, which we consider to be a privacy best practice consistent with our mission to respect our customers. If, however, you make a CCPA request we will retain the PI provided to us to make your CCPA request for our record keeping purposes.
If we cannot comply with a request, we will explain the reasons in our response. If you have any questions or concerns about Cox’s California privacy policies and practices, you can submit questions or comments to californiaprivacy@cox.com.
a. Right to Know
Your California CCPA Consumer privacy rights are as follows:
You have the right to send us a request, no more than twice in a twelve-month period, for the following information for the period that is 12 months prior to the request date (please note that PI is retained for various time periods so we may not have PI in all categories going back 12 month)
b. Opt-Out Rights
i. Exercising DNS Rights
You have the right to direct us to not Sell or Share your PI, as defined under the CCPA. We offer you the ability to opt out of Sales and Sharing through our Privacy Center here or by clicking on the “Do Not Sell or Share My Personal Information” button in the footer of our website.
ii. Opt-Out Preference Signals
You may also opt out of the Sale or Sharing of your PI via cookies or tracking technologies through an opt-out preference signal. In order to process your request through an opt-out preference signal, you must use a browser supporting the preference signal. If you choose to use an opt-out preference signal, you will need to turn it on for each browser and each device you use. If you would like to opt out of the Sale of your Viewership Data, please visit our Privacy Center here to do so.
iii. Managing Cookie Preferences
Some of the ways we use, cookies for advertising and marketing may be considered a “Sale” or “Sharing” under the CCPA. We provide Californians who use our online services a way to manage their cookie preferences based on categories of cookies through our management tool available here. Please note that the cookie preference tool linked here will only control the cookies on Cox.com. If you are visiting a Cox site other than Cox.com and would like to exercise your choices around cookies, please click on the “Do Not Sell or Share My Personal Information” link in the footer of the Cox website you are visiting. To learn more about interest-based advertising and additional opt-out choices related to it, please visit here.
You will need to do this on each browser and each device that you use to access our websites and clearing cookies on your browser(s) may disable your preference settings. More information on how to exercise choices regarding third party cookies and interest-based advertising is available here.
We do not knowingly Sell or Share the PI of Consumers under the age 16.
c. Right to Delete
You may request that we delete PI collected directly from you unless we need it for permitted purposes, such as to complete transactions and service you have requested or that are reasonably anticipated, for security purposes, to protect against fraud, or for other legitimate internal Business Purposes, including maintaining business records, to comply with law, to exercise or defend legal claims, and to cooperate with law enforcement. We will not delete your PI that we are permitted to retain, for so long as the permitted retention purpose remains, after which we will delete the PI. In some situations, we may deidentify or aggregate data in lieu of deletion. To make a request, view the “Exercising Your CCPA Rights” portion below. As with a Right to Know request, to protect you, we will require you (or your agent) to be verified before honoring your deletion requests.
In addition to requesting deletion of your PI, current customers may choose to limit how we use PI by making selections in the Privacy Preference Center by visiting your “My Account”. Anyone who receives commercial emails from us may opt out of future commercial emails by following the unsubscribe directions in the footer of those emails.
d. Right to Correct
You may request that we correct PI that we maintain about you if you believe such PI is inaccurate. We may request documentation from you in connection with your request where we have reliable documentation showing the accuracy of the information. As with a Right to Know or Right to Delete request, to protect you, we will require you (or your agent) to be verified before honoring your correction requests. Upon receipt of a verifiable request to correct inaccurate PI, we will use commercially reasonable efforts to correct the information as you direct.
You can correct certain PI that we maintain about you by visiting your “My Account”. To make a request to correct, view the “Exercising Your CCPA Rights” portion below.
e. Right to Limit Use of Your Sensitive PI
You may request that we limit our use of Sensitive PI to specific permitted business purpose such as limiting the use to: that which is necessary to perform the services or provide the goods, helping to ensure security and integrity of PI, resist malicious, deceptive, fraudulent, or illegal action directed at us, short-term, transient use, or undertaking activities to verify or maintain the quality or safety of any service or device.
To limit our use of your Sensitive PI, please view the “Exercising Your CCPA Rights” portion below or by clicking on the “Limit the Use of My Sensitive Personal Information” button in the footer of our website. We will comply with any request to limit the use of Sensitive PI no later than 15 business days from receipt of the request.
f. Non-Discrimination
We will not discriminate against you in a manner prohibited by the CCPA because you exercised your CCPA rights.
g. Exercising Your CCPA Rights
We encourage Consumers, including current customers, to make CCPA requests via the Privacy Center here. You may also call us at 1-800-699-0885 (service hours are Monday-Friday, 8am - 5pm Pacific Time, except holidays). As described above, copies of PI are available through our self-serve tools.
We verify customers via their account, or for non-account holders through a Service Provider that uses information about Consumer’s history to ask questions the answers to which will help us determine if you are who you say you are. We do this to protect your privacy and security and comply with the CCPA’s requirements. If you are not a Cox customer, you do not have to create a service account with Cox to make a request, but you will have to set up identity verification credentials to exercise your rights. We will use PI provided in a Verifiable Consumer Request only to verify your identity or authority to make the request and to track and document request responses unless you also gave it to us for another purpose.
Authorized agents of Consumers can make a request here, which will also be subject to verification.
5. Additional California Notices
In addition to CCPA rights, Californians are entitled to certain other notices, including:
a. Third Party Marketing
We will not share personal information as defined by California Civil Code § 1798.83 (“Shine the Light” law or “STL”) with third parties, outside of the Cox family of companies, for their direct marketing purposes without your consent. You can make a request to receive details on our sharing of such personal information with members of the Cox family of companies for their direct marketing purposes within the prior 12 months, by sending an email to californiaprivacy@cox.com and indicating “Shine the Light” in the subject line or body of your email request. You can also make a request by mail to the address below:
CoxCom LLC 6205-B Peachtree Dunwoody Road
Atlanta, GA 30328
Attn: Privacy Operations – 15th Floor
As these rights and your CCPA rights are not the same and exist under different laws, you must exercise your rights under each law separately.
b. Online Privacy Practices
For more information on our online practices and your California rights specific to our online services see our Online Privacy Policy. Without limitation, Californians that visit our online services and seek or acquire goods, services, money or credit for personal, family or household purposes are entitled to the following notices of their rights:
i. Online Tracking and Targeting
When you visit our online services, we and third parties may use tracking technologies to collect usage information based on your device for a variety of purposes, including serving you advertising, based on you having visited our services or your activities across time and third-party locations. Some browsers may enable you to turn on or off a so-called “Do Not Track” signal. Because there is no industry consensus on what these signals should mean and how they should operate, we do not look for or respond to “Do Not Track” signals. For more information on tracking and targeting and your choices regarding these practices, see our Online Privacy Policy. Consumers can also exercise preferences regarding cookies by following the instructions here.
ii. California Minors
Although our online service(s) are intended for an audience over the age of majority, any California residents under the age of eighteen (18) who have registered to use our online services, and who posted content or information on the online service, can request removal by contacting us at californiaprivacy@cox.com detailing where the content or information is posted and attesting that you posted it. We will then make reasonably good faith efforts to remove the post from prospective public view or anonymize it, so the minor cannot be individually identified to the extent required by applicable law. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished or archived content by search engines and others that we do not control.
6. Contact Us
For more information on your California privacy rights contact us at 1-800-699-0885 (service hours are Monday-Friday, 8-5 Pacific Time, except holidays) or email us at californiaprivacy@cox.com. You may also visit our Privacy Preference Center accessible via your My Account or our Consumer Rights Request page or write to us at:
Cox Communications
6205-B Peachtree Dunwoody Road
Atlanta, GA 30328
Attn: Privacy Operations – 15th Floor