Last updated: October 15, 2026
1. Purpose and Scope of this Notice
The purpose of this CCPA Notice (hereinafter – the Notice) by SIA Request, registration number: 40203423105, legal address: Stabu iela 109 – 1, Riga, LV-1009, Latvia (hereinafter – the Controller) is to supplement the Controller’s Privacy Policy (www.request.host/privacy-policy).
This Notice applies where the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (hereinafter – the CCPA, California Civil Code § 1798.100 et seq.), governs the Controller’s processing under the brand request.host. It describes the rights of California residents (hereinafter – Consumers) and the Controller’s relevant practices.
For personal data hosted or otherwise processed through the services by a customer (hereinafter – the Customer), the Controller acts as a processor and, where the CCPA applies, a service provider on the Customer’s behalf. Such processing is governed by the Data Processing Agreement (www.request.host/data-processing-agreement) and the Customer’s privacy information.
The Controller shall have the right to make changes to the Notice at its sole discretion. The Notice is available on the Controller’s website – www.request.host (hereinafter – the Website), as well as at the office and is applicable from the date of approval of the Notice.
2. Information We Collect
The categories below describe the personal data collected during the preceding 12 months, depending on the Consumer’s interactions with the Controller. Sources include the Consumer, their organization or its authorized users, payment and service providers, and use of the services:
- Identifiers and Contact Information: Name, address, telephone number, email address, account and organization identifiers; personal identification and tax numbers where necessary for a justified purpose;
- Commercial and Account Information: Orders, subscriptions, invoices, transaction history, bank-account information, payment references, status and limited card details, account permissions, profile image and correspondence;
- Internet or Other Electronic Network Activity Information: IP addresses, device and browser information, access and security logs, pages viewed and interactions, and online identifiers used by permitted analytics and advertising technologies.
3. Purpose of Collecting Personal Data
We collect and process personal data for the following purposes:
- Service Provision: To provide and enhance our services to Consumers;
- Communication: To contact Consumers regarding our services, updates, and relevant information;
- Marketing and Public Relations: To promote our services, measure campaigns and provide relevant advertising, subject to applicable consent requirements and communication choices;
- Security: To safeguard the legitimate interests of the Controller and the Consumers, ensuring the security of our operations, data, and the security of provided hosting and infrastructure services.
4. Disclosure of Personal Data
Where necessary for the purposes described above, the Controller may disclose relevant personal data to the following categories of recipients:
- Service Providers: Software, infrastructure, backup, network, security, support, monitoring and communication providers processing relevant identifiers, account, transaction or technical information on the Controller’s behalf;
- Payment and Business Partners: Banks and payment providers for transactions, and analytics and advertising partners for permitted measurement and marketing, receiving the relevant payment, identifier or Website activity information;
- Professional Advisors: Legal, financial and other advisors receiving information necessary for their professional services;
- Legal Authorities: Regulatory and law enforcement bodies and courts receiving information as required or permitted by law.
5. Sale and Sharing of Personal Information
The Controller does not sell personal data for money. Permitted Website advertising technologies may disclose online identifiers and Website activity to advertising partners for measurement, audience creation and personalized advertising. Disclosures for cross-context behavioral advertising are “sharing” under the CCPA; advertising-related exchanges may also constitute a “sale”. Consumers may opt out as described below.
6. Consumer Rights Under CCPA
Where the CCPA applies, Consumers have the following rights, subject to its conditions and exceptions:
- Right to Know (California Civil Code §§ 1798.110 and 1798.115): To request the categories and specific pieces of personal data collected, its sources, purposes, recipients, and categories sold, shared or disclosed for business purposes;
- Right to Delete (California Civil Code § 1798.105): To request deletion of personal data, subject to applicable exceptions;
- Right to Correct (California Civil Code § 1798.106): To request correction of inaccurate personal data;
- Right to Opt-Out (California Civil Code § 1798.120): To opt out of the sale or sharing of personal data, including for cross-context behavioral advertising;
- Right to Limit (California Civil Code § 1798.121): To limit the use and disclosure of sensitive personal information where it is used beyond the purposes permitted by the CCPA;
- Right to Non-Discrimination (California Civil Code § 1798.125): To receive equal treatment when exercising CCPA rights.
7. Exercising Your CCPA Rights
To exercise these rights, contact the Controller at Stabu iela 109 – 1, Riga, LV-1009, Latvia or by email: [email protected]. Website consent choices are available through “Manage Your Cookie Preferences” (www.request.host/cookies-policy). A valid opt-out preference signal, such as Global Privacy Control, constitutes an opt-out of sale or sharing where the CCPA applies.
The Controller reasonably verifies identity for requests to know, delete or correct. Opt-out and limitation requests do not require identity verification. An authorized agent may submit a request with proof of authority where permitted by the CCPA. Any information requested for verification must be proportionate to the request.
Requests to know, delete or correct are acknowledged within 10 business days and answered within 45 calendar days, with a further 45 days where permitted and notified. Applicable opt-out and limitation requests are fulfilled as soon as feasibly possible and within 15 business days.
Requests about data controlled by a Customer should be directed to the Customer; the Controller assists under the Data Processing Agreement. The Privacy Policy sets out retention criteria for these data categories. Retention is limited to what is reasonably necessary for the relevant purpose or legal obligation.
8. Closing Remarks
This CCPA Notice forms an integral part of our Privacy Policy and aims to maintain transparency and trust with our Consumers regarding their personal data.
The Notice may be amended as necessary, with the current version published on the Website. Significant changes will be communicated through the Controller’s usual communication channels.
In case of any questions regarding the Notice or the processing of personal data, the Controller may be contacted by letter at Stabu iela 109 – 1, Riga, LV-1009, Latvia or by email: [email protected]