CCPA: Sucuri's Commitment to Protecting Your Data

Protecting our users’ information and privacy is extremely important to us. As a cloud-based security service, we’re fully committed to complying with the requirements of the California Consumer Privacy Act (CCPA) along with other global data protection laws and regulations.

The CCPA went into effect Jan. 1, 2020, and we’ve updated our Privacy Policy and Cookie Policy to meet these new compliance requirements. There is a six-month grace period for businesses to adjust their websites, processes, and policies before enforcement.

What is the CCPA?

The California Consumer Privacy Act is a new law that mandates consumer rights relating to accession, deletion, and sharing of personal information. These regulations establish procedures to facilitate consumer rights and provide compliance guidance to businesses.

You might be familiar with GDPR, CASL, or CAN-SPAM. Many of these laws cover how to handle consent for email communication, collection of user data, and tracking technologies. CCPA is not much different, and businesses should expect more of this type of legislation in the future.

One piece of legislation unique to CCPA is the inclusion of “Do not sell my information” links in the footer of a website’s home page. This is now a legal requirement for businesses serving customers in California. If the business sells or shares user information with third parties, this new CCPA regulation offers users the right to opt out of having their information sold.

Measures Taken to Ensure Compliance

Security is at the very center of Sucuri’s vision. Privacy and compliance are our utmost concern, and we’ve aligned our internal processes to the CCPA without impacting regulations already set in place for the General Data Protection Regular (GDPR).

Our team works meticulously to ensure that Sucuri’s products and services meet the requirements set forth by global protection laws and regulations.

Measures taken to accomplish this include:

Upgrades to our products and workflows to support data management
Updates to our contractual terms and services
Reviewed existing processes to meet and exceed CCPA requirements

We’ve published CCPA-specific updates to our Privacy Policy and Cookie Policy, which can be found at the following links:

These new additions to our Privacy Policy and Cookie Policy updates explain the categories of data that we collect, how we use this data, and that we do not sell personal information.

The privacy of our customers is taken very seriously. Sucuri stores only the minimum amount of Personally Identifiable Information (PII) in our systems and cache. Only the data necessary for business and security purposes is collected.

We hope that these updates make it easier to understand how personal data is used and the control that our users have over their information.

If you have any questions, comments, or have a CCPA related request you can email us at privacy@sucuri.net.