The Virginia Consumer Data Protection Act (the “VCDPA”) confers privacy rights on Virginia consumers and imposes corresponding obligations on businesses subject to the VCDPA.
The following is intended to explain a consumer’s rights and the obligations LiftEngine has under the VCDPA.
LiftEngine licenses the categories of personal information described below from the third-party sources categorized below in developing LiftEngine’s marketing and advertising products as previously described. LiftEngine licenses such data products to categories of third parties as described in the table below.
The categories of Personal Data Processed for each of the Controller’s Processing Purposes:
We collect/process personal data for our own business purposes, including internal operations, auditing, detecting security incidents, improving our services, quality control, and legal compliance.
The commercial purpose for which we collect/process personal data is to provide marketing and advertising products, including identity recognition and resolution services and marketing analytics.
LiftEngine does not collect data directly from consumers for use in our data products. Please also note that LiftEngine does not collect biometric information from consumers. Lastly, LiftEngine does not collect sensory information such as voice, visual, thermal, olfactory, or similar sensory information.
During the last year, LiftEngine has sold personal information it has collected to our clients (i.e., “third parties” under VCDPA), for their business and commercial purposes. More specifically, LiftEngine licenses personal information to our clients for the purpose of enabling and improving their marketing and advertising campaigns from identifying potentially interested consumers to measuring the effectiveness of the marketing and advertising campaigns. We also license personal information for the purpose of identity recognition and resolution services (i.e., recognizing different records as relating to the same person) and marketing analytics. LiftEngine does not sell personal information to individual consumers.
During the last year, LiftEngine has disclosed personal information to service providers and contractors (e.g., cloud computing and storage vendors; security contractors, and consultants), for LiftEngine’s own operational business purposes.
LiftEngine does not sell personal information about consumers younger than 18 years of age for the purpose of marketing or advertising directly to the minor. LiftEngine does use personal information from minors younger than 18 to suppress matching records from marketing lists and to facilitate identity recognition and resolution.
LiftEngine does not engage in profiling in furtherance of “decisions that produce legal or similarly significant effects.”
As a consumer under the VCDPA, you have the right to request that LiftEngine disclose what personal information we collect, use, disclose, and sell or share about you. We call this your “right to know.”
To take advantage of your right to know, visit this page for more information and to get started.
You can also submit your request by mail. Print and complete this form and mail it to the following address:
LiftEngine
1 Blue Hill Plaza
Box 1509, Lobby Level
Pearl River, NY 10965
Attention: Consumer Rights Requests
To respond to your right to know request, the VCDPA permits LiftEngine to verify your identity. This will require that you provide certain personal information for validation. Information required includes:
If no list is provided, the default will be LiftBase. Email address will also be required for the sole purpose of communications regarding a specific request.
When a user successfully executes either the digital form or mail-in option, they will receive an email confirming their request at the email address provided. Within the specified timeline set forth in VCDPA, LiftEngine will attempt to match the user-provided information to a record.
If LiftEngine cannot match the name and mailing address to an individual, the individual will receive an email stating such. If a reasonable match can be made, the individual will receive up to two follow-up emails, depending on their request:
LiftEngine cannot recall projects in which an individual’s data has been already shared, so it may take six (6) to eight (8) months for a user to completely stop receiving offers from LiftBase-sourced data.
Pursuant to the VCDPA, Virginia consumers have a right to request correction or deletion of personal information about them that LiftEngine has collected or maintained. As permitted by regulation, LiftEngine will treat correction requests as a request to delete.
To take advantage of your right to know, visit this page for more information and to get started.
You can also submit your request by mail. Print and complete this form and mail it to the following address:
LiftEngine
1 Blue Hill Plaza
Box 1509, Lobby Level
Pearl River, NY 10965
Attention: Consumer Rights Requests
To respond to your right to know request, the VCDPA permits LiftEngine to verify your identity. This will require that you provide certain personal information for validation. Information required includes:
If no list is provided, the default will be LiftBase. Email address will also be required for the sole purpose of communications regarding a specific request.
When a user successfully executes either the digital form or mail-in option, they will receive an email confirming their request at the email address provided. Within the specified timeline set forth in the finalized Act, LiftEngine will attempt to match the user-provided information to a record.
If LiftEngine cannot match the name and mailing address to an individual, the individual will receive an email stating such. If a reasonable match can be made, the individual will receive up to two follow-up emails, depending on their request:
LiftEngine cannot recall projects in which an individual’s data has been already shared, so it may take six (6) to eight (8) months for a user to completely stop receiving offers from LiftBase-sourced data.
Even assuming a verifiable request, LiftEngine will retain certain personal information in our data products as necessary to comply with a legal obligation (including ensuring the deletion request is honored and record-keeping obligations), detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for the activity. In such cases, LiftEngine will retain only the minimum amount of information that does not qualify for a statutory or regulatory exception and only use the remaining data for the purposes provided by the statutory or regulatory exception.
To take advantage of your right to Opt-Out, visit this page for more information and to get started.
You can also submit your request by mail. Print and complete this form and mail it to the following address:
LiftEngine
1 Blue Hill Plaza
Box 1509, Lobby Level
Pearl River, NY 10965
Attention: Consumer Rights Requests
LiftEngine will treat opt-out requests as a request to delete.
LiftEngine does not maintain or utilize Sensitive Personal Information as a part of its’ services.
The VCDPA protects Virginia consumers who exercise their rights from discrimination. LiftEngine will not discriminate against consumers who request access to personal information about them, request deletion, or request that LiftEngine opt them out of future sales.
The VCDPA allows Virginia consumers to use authorized agents to submit requests to LiftEngine on their behalf. Authorized Agents can start requests by visit this page.
Before LiftEngine will accept requests from an agency acting on behalf of a consumer, a representative of the agent must complete the form here: https://www.liftbasedata.com/request-to-know/authorized-agency-application/
Once authorized, agents will be able to submit requests on behalf of consumers via our digital form (the “agent form”). Along with List Name, Full Name, Mailing Address, Date of Birth, agents are required to upload a written authorization from the consumer that states the agent can act on the consumer’s behalf. If no list is provided, the default will be LiftBase.
Once the agent form is submitted, LiftEngine will correspond directly with the individual, having them follow the process for consumers detailed in the above section to minimize the risk of unauthorized access to personal information and potential resulting harm.
If you have questions regarding your rights under VCDPA or LiftEngine’s data collection, use, and disclosure practices, you may contact us by mail, or email.
Our email address is dataprivacy@liftbasedata.com. Our mailing address is:
You can also submit your request by mail. Our mailing address is:
LiftEngine
1 Blue Hill Plaza
Box 1509, Lobby Level
Pearl River, NY 10965
Attention: Consumer Rights Requests
You may contact the Virginia Attorney General for more information. Please visit https://www.oag.state.va.us/
This VCDPA Privacy Notice is effective December 31, 2022.
To comply with privacy regulations, LiftEngine tracks incoming requests and deletions on an annual basis. Results can be found here.