This California Consumer Privacy Act Disclosure (“CCPA Disclosure”) explains how Capital One Financial Corporation and its U.S. affiliates (collectively, “Capital One,” “we,” “us,” or “our”) collect, use, and disclose personal information subject to the California Consumer Privacy Act (“CCPA”). It also describes the privacy rights of California residents under the CCPA and how they can exercise those rights.
This CCPA Disclosure applies solely to California residents and supplements any other privacy policies or notices applicable to the Capital One services that you visit or use.
WHAT PERSONAL INFORMATION IS COVERED BY THE CCPA?
Under the CCPA, “personal information” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. It does not include publicly available information or information that has been aggregated or de-identified.
The CCPA does not apply to certain information, such as information subject to the Gramm-Leach-Bliley Act, the Fair Credit Reporting Act, and certain other state or federal privacy laws. For example, this CCPA Disclosure does not apply to information that we collect about individuals who seek, apply for, or obtain our financial products and services for personal, family, or household purposes, which is subject to our U.S. Consumer Privacy Notice, or other financial privacy notice applicable to the Capital One services that you visit or use.
This CCPA Disclosure also does not apply to information we collect in the context of a person’s role as a job applicant, employee, associate, contractor, or other member of the Capital One workforce, which is subject to our Capital One Workforce CCPA Disclosure.
CATEGORIES OF PERSONAL INFORMATION WE COLLECT
Most of the personal information that we maintain has been collected in the context of providing financial products and services for personal, family, or household purposes, and is therefore not subject to the CCPA. However, we also collect personal information relating to California residents in other contexts, including in connection with our marketing activities, our websites and mobile applications, our small business and commercial businesses, and certain Capital One locations (such as when you visit a Capital One Café).
In the past 12 months, we have collected the following categories of personal information, as defined in the CCPA, relating to California residents. The categories of personal information that we collect, use, and disclose about a California resident will depend on our specific relationship or interaction with that individual. The examples provided in each category below are for illustrative purposes only.
PURPOSES FOR WHICH WE USE PERSONAL INFORMATION
We may use personal information relating to California residents for one or more of the following business purposes:
We may also use personal information relating to California residents for one or more of the specific “business purposes” listed in the CCPA:
In the past 12 months, we have not disclosed personal information relating to California residents in any other manner that we consider a sale within the meaning of the CCPA.
RIGHTS UNDER THE CCPA
Rights to Know, Delete, and Correct. If you are a California resident, you may request that we disclose to you the following information:
California residents also have the right to submit a request for deletion or correction of their personal information under certain circumstances, although in some instances, we may decline to honor your request. For example, we may decline to honor your request if we cannot verify your identity or confirm that the personal information that we maintain relates to you, or if we cannot verify that you have the authority to make a request on behalf of another individual. In other instances, we may decline to honor your request where an exception applies, such as where the disclosure of personal information would adversely affect the rights and freedoms of another consumer or where the personal information that we maintain about you is not subject to the CCPA. Nonetheless, you have the right to be free from unlawful discrimination for exercising your rights under the CCPA.
If you are a California resident and would like to exercise your rights to know, delete, or correct your personal information as described above, please submit your request by:
Once we receive your request, we may verify your identity through your account or by requesting additional information sufficient to confirm your identity, such as photos of your government ID.
If you would like to use an agent to exercise your CCPA rights, or if you are an agent seeking to exercise CCPA rights on behalf of another person, please contact us at 1-888-480-3282.
Right to Opt Out of Sharing Personal Information for Cross-Context Behavioral Advertising. California residents have a right to opt out of sharing personal information for cross-context behavioral advertising purposes. You can exercise your right to opt out by enabling Global Privacy Control (GPC) in your browser. GPC is a setting that allows you to communicate your privacy preferences to websites and online services that you visit. When we detect a GPC signal from a browser, our Online Services are designed to treat the browser as opted out and to stop sharing personal information for certain targeted advertising purposes, in accordance with applicable laws. Please visit the Global Privacy Control website to learn more about the setting and how to enable it on your browser.
You can also opt out of certain targeted advertising by visiting the Digital Advertising Alliance Opt Out Page, Network Advertising Initiative Opt Out Page, and TrustArc Preference Manager and by adjusting the privacy settings on your mobile device (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).
Please note that your preferences will apply only to the specific browser from which you opt out. You will need to opt out separately on all of your browsers. If you delete cookies, change web browsers, reset your mobile advertising ID, or use a different device, you may need to opt out again. Our online services do not function differently in response to browser "Do Not Track" signals, but you may opt out of certain targeted advertising as described above.
Our annual transparency report shows the number of data requests we receive and how long it takes us to fulfill those requests.
CHANGES TO THIS CALIFORNIA CONSUMER PRIVACY ACT DISCLOSURE
We may change or update this CCPA Disclosure in the future. When we do, we will post the revised CCPA Disclosure on our website. This CCPA Disclosure was last updated and became effective on the date posted at the top of this page.