CCPA/CPRA

1. CCPA and CPRA Overview

The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) are California state privacy laws that grant California residents specific rights regarding their personal information. HAI UAE fully complies with these laws.

2. Covered Information

CCPA/CPRA covers "personal information" which includes information that identifies, relates to, or could be reasonably linked with a particular consumer:

• Name, address, email, phone number
• Account credentials and authentication data
• Payment and financial information
• Device identifiers and IP addresses
• Commercial information (purchase history, transactions)
• Biometric information
• Health and fitness data
• Geolocation data
• Inferences drawn from personal information

3. Your CCPA/CPRA Rights

3.1 Right to Know (Access)

You have the right to request:

• What personal information we collect about you
• The sources of that information
• Our purposes for collection
• Categories of third parties with access
• A copy of the specific data we hold

3.2 Right to Delete

You may request deletion of personal information we've collected from you, with exceptions including:

• Information needed to complete transactions
• Information required by law
• Information for security and fraud prevention
• Business necessity information

3.3 Right to Correct (CPRA)

You can request correction of inaccurate personal information we hold about you.

3.4 Right to Opt-Out of Sales/Sharing

You have the right to:

• Opt-out of the sale of personal information
• Opt-out of sharing for cross-context behavioral advertising
• Opt-out of profiling in furtherance of decisions that produce legal/similarly significant effects

3.5 Right to Limit Use and Disclosure

You can request we limit use of sensitive personal information to:

• Performing services reasonably expected
• Preventing security incidents
• Compliance with law

3.6 Right to Non-Discrimination (CCPA/CPRA)

We will not discriminate against you for exercising your rights:

• No denial of goods or services
• No different pricing or rates
• No different quality of service
• We will not penalize you for privacy choices

3.7 Right to Authorize an Agent

You may designate an authorized agent to submit requests on your behalf. The agent needs:

• Written authorization from you
• Or proof of power of attorney
• Or notarized verification

4. Data Collection Practices

4.1 Information We Collect

• Information you provide directly (registration, listings, purchases)
• Information collected automatically (cookies, analytics, device info)
• Information from third parties (payment processors, analytics providers)

4.2 Purposes for Collection

• Providing and improving our services
• Customer service and support
• Payment processing
• Marketing and advertising (with consent)
• Security and fraud prevention
• Analytics and user research
• Legal and regulatory compliance

5. Do We Sell or Share Personal Information?

HAI UAE does not:

• Sell personal information in the traditional sense
• Share personal information for cross-context behavioral advertising (without your consent)
• Disclose personal information to unaffiliated third parties for their own marketing

We do share information with:

• Service providers (payment, email, analytics) under contracts protecting your data
• Law enforcement when legally required
• Business partners when you authorize

6. Sensitive Personal Information (CPRA)

We limit collection and use of sensitive personal information to:

• Necessities to perform requested services
• Prevent security incidents and fraud
• Comply with legal obligations

7. Retention of Personal Information

We retain personal information only as long as necessary for the purposes collected:

• Account data: Duration of account + 2 years
• Transaction data: 7 years (legal requirement)
• Marketing data: Until you opt-out
• Support records: 3 years

8. Submitting a CCPA/CPRA Request

8.1 How to Make a Request

• Online Portal: Visit your account settings → Privacy Requests
• Email: hello@haiuae.com
• Phone: 1-800-HAI-UIAE (toll-free)
• Authorized Agent: Submit with power of attorney or authorization

8.2 Information Needed

• Full name
• Email address or account identifier
• Type of request (know, delete, correct, opt-out, etc.)
• Supporting documentation if applicable

8.3 Response Timeline

• Acknowledgment: Within 10 business days
• Substantive response: Within 45 calendar days
• Extension: Up to 45 additional days for complex requests

9. Verifying Your Identity

We will verify your identity by requesting:

• Email confirmation
• Account credentials
• Additional supporting documentation

10. Opt-Out Mechanisms

10.1 Opt-Out of Sale

To opt-out of personal information sales:

• Click "Do Not Sell My Personal Information" link (in footer)
• Or submit request through privacy portal

10.2 Opt-Out of Targeted Advertising

• Browser-based opt-out tools
• Industry opt-out mechanisms
• Our email preference center

11. California Consumer Rights Disclosure

As a California resident, you have specific statutory rights. For the complete disclosure of data practices, visit:

• Our Privacy Policy page
• Our Cookie Policy page
• Account settings → Privacy & Security

12. For Minors Under 13

We do not knowingly collect or sell personal information of children under 13. For users 13-16:

• We do not sell or share information without authorized opt-in
• Parents/guardians may request deletion on child's behalf

13. Right to Know and Use

You have the right to receive information about the categories of data we use for:

• Direct advertising
• Behavioral profiling
• Decisions with legal effects

14. Submittin
g Complaints

If you believe your CCPA/CPRA rights have been violated:

• First, contact us: privacy@haiuae.com
• If unsatisfied, file a complaint with California Attorney General
• Website: California Attorney General CCPA page

15. Contact Information

For CCPA/CPRA privacy requests and inquiries:

• Email: hello@haiuae.com
• Phone: 1-800-HAI-UIAE
• Mailing Address: HAI UAE Privacy Department, Dubai, UAE
• Response Time: 45 days