Privacy notice for California residents

Last updated:  December 20, 2022

Effective date: January 1, 2023

This supplemental privacy notice for California residents (“notice”) describes how Clarivate Plc and our group companies (“Clarivate”, “we”, “us”, and “our”) collect, use and disclose the personal information (as defined below) of California residents (“consumer” or “you”) when acting as a business. This notice applies to personal information collected by our websites, applications, services, and products (collectively “services”), and during routine offline business contact with you.

We adopted this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”), the California Privacy Rights Act of 2020 effective January 1, 2023 (“CPRA”) and other California privacy laws. Any terms defined in the CCPA and CPRA have the same meaning when used in this notice.

IF YOU ARE NOT A CALIFORNIA RESIDENT, THIS NOTICE DOES NOT APPLY TO YOU. PLEASE REFER TO OUR MAIN PRIVACY NOTICE HERE INSTEAD.

In the context of this notice, personal information means information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include certain publicly available information, deidentified or aggregated consumer information, and other information excluded from the CCPA and CPRA, such as health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the California Confidentiality of Medical Information Act (CMIA), clinical trial data subject to the Common Rule. The CCPA and CPRA does not apply to information that is de-identified in accordance with the requirements for de-identification set forth in Section 164.514 of Part 164 of Title 45 of the Code of Federal Regulations and is derived from patient information that was originally collected, created, transmitted or maintained by an entity regulated by the Health Insurance Portability and Accountability Act, the Confidentiality of Medical Information Act, or the Federal Policy for the Protection of Human Subjects. Therefore, this notice also does not cover our licensing or disclosure of such information.

1. Personal information we collect

The table below indicates the categories of personal information about consumers that we have collected in the preceding twelve (12) months. Note that the examples given below do not represent a comprehensive list and that not all categories and examples shown below may apply to every consumer.

 

Category	Examples
Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, or other similar identifiers.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, signature, address, telephone number, education, employment. Some personal information included in this category may overlap with other categories.
Protected classification characteristics under California or Federal law (i.e., sensitive personal data or special categories of data)	Race, gender, ethnicity (optional)
Commercial information	Records of services purchased or obtained from us, or considered, or other purchasing or consuming histories or tendencies relating to our services.
Internet or other similar network activity	Browsing history, search history, information on a consumer’s interaction with our services and advertisements.
Geolocation data	A device’s physical location – to the extent that an IP address may provide information regarding the location of a device you use to access our services.
Professional or employment-related information	Current or past job history or professional experience in connection with your field of expertise or employment.
Inferences drawn from personal information	The creation of a profile or summary about, for example, an individual’s preferences, behavior or characteristics.

Your personal information is required to enable us to provide our service to you. If you do not provide the necessary personal information, it may delay or prevent us from providing services to you. You confirm that you are authorized to provide to us the personal information which we shall collect on your behalf. Where the personal information relates to your employees, agents, associates or family members, it is not reasonably practicable for us to provide to them the information set out in this notice. Accordingly, where appropriate, you are responsible for providing this information to any such person.

2. Where we collect information from

• Directly from you when you use our services or interact with us. We may also collect your personal data through the use of cookies and similar tracking technologies when you opt-in. Please click here for our cookies policy.
• From the organization(s) to which you belong or person(s) who have arranged your access to our services, e.g., your employer or the institution you are affiliated with may provide us with contact information so that we can set up your login.
• Our partners and service providers, e.g., technology providers in connection with your use of our services.
• Public or paid-for sources, e.g., we may acquire information from data re-sellers or marketing lists from third parties.

3. Purposes

Clarivate is permitted to process your personal data under the following legal grounds:

• consent;
• when processing is necessary for a business purpose stated in this notice or a following notice of collection;
• compliance with legal obligations that the Clarivate is subject to;
• engaging in public or peer reviewed scientific, historical, or statistical interest; and
• exercise or defense of legal claim.

We may use or disclose your personal information for one or more of the business purposes listed below or to carry out other reasonable business purposes consistent with this list:

• Customer and product administration: to provide you with our services and information that you or the sponsoring organization requested or for which you have expressed an interest, or that you access through our services. Also, to create product accounts, provide user and technical support, enforce our terms of business, report product usage information to our customers and business partners, content and technology providers, manage customer information across our websites and services, contact you about renewal of your services, and to perform other related administrative tasks.
• Product development and personalization: to deliver personalized functionality and content in our services, for instance we may retain your browsing and usage information to make your searches within our services more relevant. We also analyze product usage information to understand which content and tools are most useful for you and to allow us to deliver and suggest tailored content, features and other Clarivate services that we believe may interest you. We may also use information collected on our services, usually in aggregated form, to analyze the functionalities we offer and to improve the design and content of our services.
• Product content: to organize and include information in our services and to include personal information which you choose to make available in our services (for instance, you may wish to provide information to enable peer connection and related collaboration).
• Research activities: to maintain and support our research activities, which includes the identification and recruitment of research participants, related fieldwork, developing and providing research services and payment of incentives to a research participant or to contact you to participate in future research activities.
• Marketing and events: to administer events we host or attend (e.g., conferences, webinars, etc.), to send you marketing messages for Clarivate services that may interest you and to provide you with advertising based on your activity. You can opt out from marketing messages at any time either by clicking the unsubscribe link on the message, visiting the Email preferences center, or by emailing news@clarivate.com.We do not disclose your contact information to third parties for their own marketing purposes unless we have obtained your consent to do so in accordance with applicable laws.
• Security: to protect the security of our IT systems, architecture and networks as well as to prevent misuses of our services. Refer to the Clarivate Information Security Program for more information about how Clarivate protects your personal data.
• Legal rights: to exercise our rights and to the extent reasonably required, to assist third parties (such as your employee or our business partners) in exercising their rights, to carry out our contractual obligations, to defend ourselves from claims and to comply with laws and regulations that apply to our group or third parties with whom we work and for the purposes of fraud screening and prevention.
• Business operations & restructuring: to operate our business which includes activities such as recordkeeping, accounting, training and quality management and improvement purposes. We may also use personal information to participate in, or be the subject of, any sale, merger, acquisition, restructure, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock.

We may also use your personal information as described to you in a supplemental or separate notice when collecting your information.

4. Sharing your personal information

Clarivate shall adopt a reasonable standard of care to store and protect from disclosure of any personal information collected by limiting access to personal information and sensitive personal information to individuals on a ‘need to know’ basis. Our third-party service providers are subject to security and confidentiality obligations and are only permitted to process information for a specified, legitimate business purpose and in accordance with our instructions and applicable laws.

The table below outlines the categories of personal information about consumers that we have disclosed for a business purpose to a third party in the preceding twelve (12) months. Note that not all categories and examples shown below may apply to every consumer.

 

Categories of Third Parties	Categories of Personal Information
Service providers such as cloud computing providers or research vendors and web analytics services like Google Analytics and credit card payment processors.	‒         Identifiers ‒         Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) ‒         Commercial information ‒         Internet or other similar network activity ‒         Professional or employment related data ‒         Sensory data ‒         Inferences drawn from other Personal Information
Business partners with whom we deliver co-branded services or host events; or whose content or technology we make available through our services.	‒         Identifiers ‒         Commercial information
Professional advisors such as legal counsel and information security professionals where reasonably required to protect our rights, users, systems and our services.	‒         Identifiers ‒         Commercial information ‒         Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
Prospective and actual buyers, sellers, advisers or partners in relation to any sale merger, acquisition, or similar corporate event involving Clarivate.	‒         Identifiers ‒         Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) ‒         Commercial information
Clarivate affiliates and subsidiaries	‒         Identifiers ‒         Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) ‒         Commercial information ‒         Internet or other similar network activity ‒         Professional or employment related data ‒         Sensory data ‒         Inferences drawn from other Personal Information
Advertising networks, social networks	‒         Internet or other similar network activity
Marketing third parties	‒         Identifiers ‒         Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
Customers	‒         Identifiers ‒         Commercial information ‒         Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) ‒         Inferences drawn from other Personal Information
Governmental authorities and regulators, as required under applicable law.	‒         Identifiers ‒         Commercial information

5. Sharing your sensitive personal information

Sensitive personal information is a subset of personally identifiable information that requires greater security protections and standards of care in handling. Sensitive personal information, also known as “special categories of information”, is defined as information that if lost, compromised, or disclosed could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual.

We do not use or disclose sensitive personal information other than to provide you our services as permitted by California law. Clarivate does not sell or share sensitive personal information for the purpose of cross-context behavioral advertising.

We collect sensitive personal information based on one or more of the following legal grounds:

• You have given explicit consent to the collection for one or more specified purposes;
• Where the collection of sensitive personal information is manifestly made public by you; and/or
• Where the collection is necessary for exercise or defense of legal claims.

6. Retention

We retain your personal information for only as long as necessary to provide you our services. We retain your personal information in accordance with our Records Retention Policy.

7. Children

We do not knowingly collect or sell personal information from anyone under the age of 16. If you are under 16, please do not provide any personal information about yourself to us. If you believe that a child under 16 may have provided us personal information, please contact us at data.privacy@clarivate.com.

8. Your rights

California residents are afforded specific rights regarding their personal information. This section describes these rights and explains how to exercise them, subject to certain exceptions.

Right to know
You have the right to request that we disclose certain information to you about our collection, use and disclosure of your personal and sensitive information.This information includes:

• Categories of personal information we have collected about you
• Specific personal information we have collected about you
• Where we received your personal information from
• The business purpose for collecting or sharing your personal information

Right to deletion
You have the right to request that we delete personal information we collected about you, and to direct our service providers to delete it as well, subject to certain exceptions permitted by applicable California law.

Right to correction

You have the right to request that we correct your inaccurate personal information.

Right to opt out of sharing

Clarivate does not share your personal information with third parties for cross-context behavioral advertising.

Do not sell my personal information

Clarivate does not sell personal information as defined in applicable California law.

Do not share or disclose my sensitive personal information

You have the right to limit how your sensitive personal information is disclosed or shared with third parties, as defined in the CPRA.

Right to non-discrimination
You have the right to not be discriminated against for exercising any of your CCPA/CPRA rights.

Exercising your rights
To exercise your rights as described above, please submit a request using one of the following methods:

• Through our online portal by clicking here
• Email data.privacy@clarivate.com
• Call 855-258-5858, and select option #4

Upon receiving a request from you, we will first verify your identity by matching the information you provide (including your name, email address, and phone number) with what we have on file for you. We may ask you for additional information to verify your identity or to comply with your request.

You may use an authorized agent to make a request on your behalf. To designate an agent, you will need to provide a written and signed document by both you and the agent that authorizes the agent to act on your behalf or demonstrate power of attorney. You may also use a power of attorney. We will still require you to provide sufficient information to allow us to reasonably verify your identity and we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Response timing and format
We will respond to your request within 10 days of receipt and endeavor to respond to a verifiable consumer request within 45 days of receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.

We will typically communicate with you in the same manner in which the request was received. Or, if you have an account with us, we may deliver our written response to that account.  The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded and only as permitted by applicable California law.  If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

9. Changes to our privacy notice

We reserve the right to amend this notice at our discretion and at any time. Any changes will be effective when we post the revised notice. This notice was last updated as of the effective date listed above. We encourage you to periodically review this page for the latest information on our privacy practices.

10. How to contact us

If you have any questions or comments about this notice, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under the CCPA, please do not hesitate to contact us by submitting a request here, e-mailing us at data.privacy@clarivate.com or calling: 855-258-5858, option #4.