Last updated February 25, 2020

Previous Versions

The information provided in this “California Privacy Notice” section only applies to California residents and supplements Looker’s master Privacy Policy, which is available at looker.com/privacy.

This notice describes how we collect, use and share your Personal Information, and your rights with respect to that Personal Information, and is effective as of January 1, 2020.

“Personal Information” has the meaning given in the California Consumer Privacy Act of 2018 (CCPA) but does not include information exempted from the scope of the CCPA.

Notice Regarding Sale of Your Personal Information

Looker respects your data as a customer and user of the Looker Product and Services, which are described in the Master Service License Agreement (“MSLA”). We do not sell your information, including personal information, in the provision of our Products and Services. However, your Personal Information, such as cookie ID, online profile, or business contact information, may be sold by certain third parties who receive it from us. You may opt-out of these sales of marketing information by clicking the link “Do not sell my personal information” to update your opt-out and other privacy preferences.

Your California Privacy Rights

As a California resident, you have the rights listed below. However, these rights are not absolute, and we may be able to decline your request in accordance with the CCPA.

However, the CCPA allows us to charge you a different price or provide a different service quality if that difference is reasonably related to the value of the Personal Information we are unable to use.

How to Exercise Your California Privacy Rights

You may exercise your California privacy rights to access and be informed, request deletion, and/or opt out of the sale of your personal information by submitting a verifiable consumer request when you:

You may also make a request on behalf of your child under 13. We will respond to your request within 45 days, unless additional time is required, and then we will respond within 90 days. We may confirm your request directly with you prior to fulfilling your request. We will need to confirm your identity and California residency to process your requests to exercise your information, access or deletion rights. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

Right to opt out of sales

In addition, you can opt out of the sale of your Personal Information by clicking the “Do Not Sell My Personal Information” button at the bottom of any page that collects your information.

Authorized Agents

If you are using an authorized agent to exercise your rights, Looker may require that you:

  1. Provide the authorized agent written permission designating them to submit the request on your behalf; and
  2. Verify your own identity directly with Looker.

Looker reserves the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf.

Verifying Your Identity

Looker, or third-party identity verification service, will need to confirm your identity in order to respond to your request. When possible, we will match the identifying information that you provide in your request to the information that we maintain about you. In some circumstances, such as requests related to the Looker Certified Program, we may request that you login to your account or provide government issued identification in order to process your request or the request of an authorized agent. If we do require additional information from you, it will be retained to the extent needed to verify your request.

We may need to contact you in order to clarify your request, confirm your identity, or collect more information in order to verify and respond to your request. If we are unable to verify your identity, Looker will not disclose any specific pieces of personal information to you and will inform you that we cannot verify your identity. In the event your request is denied in whole or in part, we will inform you of the reason for such denial.

When responding to privacy requests to know or delete, we may not be able to provide information on or delete your personal information related to online activitiy because Looker does not know your identity with the degree of certainty and does not maintain individualized information from third party cookies.

Personal Information That We Collect, Use and Share

The chart below summarizes our collection, use and sharing of Personal Information during the last 12 months before the effective date of this Privacy Policy. We describe the sources through which we collect and the purposes for which we collect, use and share your Personal Information in How We Collect and Share Your Personal information.

Potential Business Purposes
Looker’s Products and Services

Personal Information obtained from the customer or consumer for providing Looker Products and Services may be shared with certain vendors in order to provide the Products and Services requested by those customers and consumers. Looker does not and will not sell this information. Please refer to our current list of subprocessors: looker.com/trust-center/privacy/subprocessors

Additionally, Looker may use or share the Personal Information provided in order to fulfill Looker’s Business Purposes, including to detect or prevent fraud and provide other support.

Looker is a Service Provider to its customers. The customer is in control (as with GDPR) of determining when or if they will honor the CCPA request. The process to delete the personal information of users is described in this doc: https://docs.looker.com/admin-options/tutorials/delete-user.

Looker, as a Business, collects and uses Personal information about consumers of Looker’s other services, which includes the exam data for participants in the Looker Certification Program, in order to provide the services requested. For additional information, visit the Looker Certification Program: looker.com/certification.

Looker’s Websites and Marketing Activities

Looker and Third Parties may place cookies and other related technology on Looker’s website. Third parties may then share the information collected by that cookie with other businesses for a commercial purpose. For additional information, refer to Looker’s Cookie Policy (Website): looker.com/trust-center/privacy/cookies/cookie-policy

Additionally, Looker collects the Personal Information of individuals as part of our marketing activities, including when you complete a form on our Websites, participate in promotional activities, contact us or otherwise engage with our company, and also from other marketing sources.

How We Collect and Share Your Personal information

In the preceding 12 months, Looker has shared personal information with third parties for the following purposes.

We may use your personal information collected in the Looker Products and Services, including the Platform and related services, such as learning and customer support:
Categories of Personal Information Collected Categories of Sources of Personal Information Purposes, Including Business Purposes for Looker Using or Disclosing Personal Information Categories of Third Parties with whom Looker shares Personal Information
Personal Information contained in Customer Records Looker’s Customers In order to perform the service requested Subprocessors
Professional or employment-related related information Performing services on behalf of the customer

Auditing related to a current interaction

Debugging

Security detection and protection against fraud or illegal activity and prosecution of those responsible

Activities to verify or maintain the quality of a service

Short term, transient use
Geolocation (to the extent that general regions may be used with a mapping tool)
Internet/online activity Looker

Analytics vendors
Internal research for product improvement
We may use the following categories of your personal information collected for the Other Services, including the Looker Certification Program:
Categories of Personal Information Collected Categories of Sources of Personal Information Purposes, Including Business Purposes for Looker Using or Disclosing Personal Information Categories of Third Parties with whom Looker shares Personal Information
Identifiers Consumer (Examinee) Performing services on behalf of the customer

Auditing related to a current interaction

Debugging

Security detection and protection against fraud or illegal activity and prosecution of those responsible

Activities to verify or maintain the quality of a service

Internal research for product improvement

Short term, transient use
Subprocessors

Social media (only to the extent the Examinee actively enables sharing of certification badge)
Internet/on-line activity
Professional or employment-related related information
Personal Information contained in Customer Records (to the extent that the testing service collects payment information)
Other sensory information (to the extent video and keystroke logging are recorded)
Protected class characteristics (to the extent an examinee requests accommodation)
We may use the following categories of your personal information collected on our Websites, for our marketing efforts, and for our Community activities, Partner Program, and events:
Categories of Personal Information Collected Categories of Sources of Personal Information Purposes, Including Business Purposes for Looker Using or Disclosing Personal Information Categories of Third Parties with whom Looker shares Personal Information
Identifiers Looker’s Customers

Consumers

Looker

Marketing and sales vendors and partners
Performing services on behalf of the customer

Auditing related to a current interaction

Debugging

Security detection and protection against fraud or illegal activity and prosecution of those responsible

Activities to verify or maintain the quality of a service

Internal research for product improvement

Short term, transient use
Marketing and sales partners

Security and other operations vendors

Event sponsors
Professional or employment-related information Customers

Consumers

Marketing and sales vendors and partners

Event sponsors
Internet/on-line activity on Looker.com websites Consumers

Looker

Digital marketing vendors
Digital marketing vendors and partners
Categories of Personal Information Collected Categories of Sources of Personal Information Commercial Purposes for Looker Using or Disclosing Personal Information Categories of Third Parties with whom Looker shares Personal Information
Internet/on-line activity on Looker.com websites* Consumer

Third party cookie providers*
We may receive or “sell” your Personal Information under California law for analytics, marketing purposes.** Third party cookie providers*

*See our Cookie Policy for a list of our third party analytics, marketing, and advertising vendors and partners.

**Notice: This information may be further sold by these vendors and partners, unless you opt-out of a sale.

Contact for More Information

If you have questions or concerns about Looker’s privacy policies and practices, you may contact us by emailing privacy@looker.com.


Glossary

Category Definition/Description (categories may overlap)
Authorized Agent A consumer may authorize another person to exercise their right to know, delete, or to opt-out of the sale of the consumer’s personal information on the consumer’s behalf. An authorized agent may be a natural person or a business entity that is registered with the California Secretary of State.
Biometric Information A person’s physiological, biological or behavioral characteristics, including their DNA, that can be used alone or combined with other information to identify a person. Biometric information includes, but is not limited to, images of a person’s iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.
Business Purpose Business purposes are:
  1. Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance.
  2. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
  3. Debugging to identify and repair errors that impair existing intended functionality.
  4. Short-term, transient use, including contextual customization of ads as a part of the engagement.
  5. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
  6. Undertaking internal research for technological development and demonstration.
  7. Undertaking activities to verify or maintain the quality or safety of a service, and to improve, upgrade, or enhance the service.
Commercial Information Records of personal property, Offerings purchased, obtained, or considered, financial information, or other purchasing or consuming histories or tendencies.
Geolocation Data For example, your precise location derived from GPS coordinates or telemetry data.
Identifiers Name, alias, postal address, unique personal identifier, customer number, email address, account name, social security number, driver’s license number, passport number, insurance policy number, bank account number, or other similar identifiers.
Inferences The derivation of information, data, assumptions, or conclusions from any of the above categories of Personal Information to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes.
Internet or Network Information Browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.
Online identifiers An online identifier or other persistent identifier that can be used to recognize a consumer, family or device, over time and across different services, including but not limited to, a device identifier; an Internet Protocol address; cookies, beacons, pixel tags, mobile ad identifiers, or similar technology; customer number, unique pseudonym, or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers (i.e., the identification of a consumer or a device to a degree of certainty of more probable than not) that can be used to identify a particular consumer or device.
Professional or Employment-Related Information This term is not defined in the CCPA, but likely includes any information relating to a consumer's current, past or prospective professional experience (e.g., job history).
Protected Classification Characteristics Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Sensory Information Audio, electronic, visual, thermal, olfactory, or similar information.

Previous Versions

Dec 2019