US STATE PRIVACY NOTICE
Last updated April 1, 2024
As mentioned in our other privacy disclosures the privacy laws of certain US states require us to provide some information about our data processing practices to its residents, including the rights that may be available to residents of those states upon the effective dates of the state laws and regulations. This Notice supplements our SpaceX Privacy Policy by explaining your privacy rights if you are a resident from these states and includes our Notice at Collection under California law. However, this Privacy Notice does not reflect our collection, use or disclosure of personal information where an exception under the applicable state law applies.
1. California Residents
A. What We Collect, Who We Collect Personal Information From, and How We Use it
We have set out below the categories of personal information we have collected about California residents in the past 12 months as well as the sources, business or commercial purposes and categories of third parties with whom we disclose the personal information. We collect this information directly from California residents who use our website or create accounts related to our products and services.
| Category of personal information |
Corresponding reference to category of personal information under CCPA definition of personal information (Cal. Civ. Code § 1798.140(o)(1)) |
Business or commercial purposes for which information was collected |
Category of third parties with whom we |
Retention Period |
- Name
- Title
- Username or similar identifier
- Account Password
- Delivery/service address
- Email Address
- Telephone number
- Details or products and services customers have purchased from us
|
(A) Name
(A) Unique personal identifier
(B) Signature
(A) Postal address
(A) Email address
(B) Telephone number
(D) Records of products or services purchased
(D) Commercial information
(D) Tendencies
(H) Electronic information
|
- To process and deliver customer orders
- To manage payments, fees and charges
- To manage our relationship with customers, such as communicating with them about our goods and services, providing customer service, and notifying them of changes to our terms or privacy policy
- To administer and protect our business and services, including troubleshooting, and performing data analysis, testing, system maintenance, support, reporting and hosting of data To process and deliver customer orders
|
Service provider s that process personal informati on solely on our behalf and which are subject to data security measures |
For the life of your account plus two years. |
- Customer service equests, interests, preferences, feedback and survey responses
- Billing address
- Payment card detail
|
(B) Financial information
(B) Credit card number, debit card number
|
- To manage payments, fees and charges
- To manage our relationship with customers, such as communicating with them about our goods and services, providing customer service, and notifying them of changes to our terms or privacy policy
- To administer and protect our business and services, including troubleshooting, and performing data analysis, testing, system maintenance, support, reporting and hosting of data
- To detect, prevent or otherwise address fraud, security or technical issues, appropriate use policies and privacy policies
- To defend our interests in the event of a dispute
- To comply in good faith with applicable laws, legal processes, and lawful government requests
|
Same as above |
For the life of your account plus two years. |
- Website technical data, which includes the following information about users of our online website and services: Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and the ways in which the user uses or interacts with our online website and services
|
A) Internet Protocol address
(F) Internet or other electronic network activity information
|
- Same as above; and
- To use data analytics to debug, optimize, and improve our products and services, marketing, customer relationships and experiences
|
Same as above |
For the length of your browsing session. |
- Professional or employmentrelated information for applicants, including name, address, information in resume/CV, and other information needed to determine viability of application
|
(I) Professional or employment-related information |
- To manage the job application and hiring process
- To communicate with you regarding the job application and hiring process
- To administer and protect or business services, and legal rights
- To detect, prevent or otherwise address fraud or security issues
- To defend our interests in the event of a dispute
- To comply in good faith with applicable laws, legal process, and lawful government requests
|
Same as above |
If the applicant becomes an employee, the information will become a part of that individual’s employment file.
For those individuals that do not become employees, this information will be maintained in accordance with our legal retention requirements
|
While our standard practice is to retain personal information for the retention periods stated in the above chart, there may be scenarios where we need to retain certain personal information for longer periods of time. For example, we may need to retain personal information for longer periods of time if we have a legal right or obligation to continue to retain your information, such as in the event of a potential dispute or to ensure proper enforcement of our terms and agreements.
b. Your Rights
As a California resident, you have the following rights regarding personal information we collect, use, share and discuss about you, specifically:
- Right to Access and Data Portability – you have the right to request, up to two times each year, access to categories and specific pieces of personal information about you that we collect, use, disclose, and share.
- Right to Delete – you have the right to request that we delete personal information that we collect from you, subject to applicable legal exceptions.
- Right to Correct – you have the right to request that we correct inaccurate personal information that we maintain about you, subject to applicable legal exceptions.
- Right to Limit the Use and Disclosure of Sensitive Personal Information – you have the right to instruct a business to limit its use or disclosure of your sensitive personal information to that use which is necessary to perform the services or provide the goods reasonably expected by you in your request for those goods and services and to perform certain activities permitted by the CCPA. Please note that SpaceX does not use or disclose sensitive personal information for any purposes other than those necessary to provide the relevant services or as permitted by the CCPA.
- Right to Opt-Out of Sale or Sharing of Personal Information:
You also have the right to “opt-out” of the “sale” or “sharing” of your personal information to or with “third parties” (as those terms are defined by applicable law). We do not sell or share your personal information except as otherwise described in this policy, so so there is no need to opt-out of the sale or sharing of your personal information. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.
In order to exercise these rights, please see Section 3.
Please note that you will not be discriminated against in any way by virtue of your exercise of the rights listed in this Notice which means we will not deny goods or services to you, provide different prices or rates for goods or services to you, or provide a different level or quality of goods or services to you.
2. RESIDENTS OF VIRGINIA, COLORADO, UTAH, CONNECTICUT AND OTHER STATES
If you are a resident of Virginia, Colorado, Utah, Connecticut, or another US state with applicable laws and regulations, our Supplemental US State Privacy Notice also applies to you. Additionally, please note that you also have the right to access, correct, and delete your personal information (as described above). In addition to these rights, to the extent we partake in such activities, you may have the right to opt out of the processing of your information for purposes of (a) targeted advertising, (b), the sale of your personal information; or (c) profiling in furtherance of decisions that produce legal or similarly significant effect concerning you.
If we use or disclose your personal information to third parties for any of these purposes, we will provide you the means to opt-in or opt-out of this type of disclosure as specified by applicable law.
You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Notice which means we will not deny goods or services to you, provide different prices or rates for goods or services to you, or provide a different level or quality of goods or services to you.
Please note that, depending on where you live, you may not have all the rights listed above. To exercise any of these rights, please see Section 3 below.
3. EXERCISING YOUR INDIVIDUAL PRIVACY RIGHTS
To submit a request to exercise the right to access, correct, or delete, please submit a request, with the details you would like to access, correct, or delete, by email to privacy@spacex.com and include “Request to Access, Correct, or Delete” in the subject line, or by mail to ATTN: Privacy/Legal, Space Exploration Technologies Corp., 1 Rocket Road, Hawthorne, CA 90250. Please note that we may deny certain requests, or only fulfill some in part, as permitted or required by law. For example, if you request to delete personal information, we may retain personal information that we need to retain for legal purposes.
We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.
We may need to verify your identity, and/or ask you to confirm your request. In order to respond to your request, we may request additional information to complete the verification process. If we deny your request, we will explain why.
You can designate an authorized agent to make a request on your behalf if you sign a written declaration that you authorize the authorized agent to act on your behalf.
If you use an authorized agent to submit a request, please have the authorized agent take the following steps in addition to the steps described above: (1) Mail a notarized copy of your written declaration authorizing the agent to act on your behalf to the address listed below (we will reimburse you for the costs of notarizing the declaration and mailing it to us if you provide a receipt showing the costs paid and they are reasonable); and (2) Provide any information we request from you to verify your identity and that you provided the authorized agent permission to submit a request on your behalf.
Appeals. If you are not satisfied with the resolution of your request, you might have the right to appeal our decision. Our written response to your request will include information about any right to appeal
4. Contact for More Information
If you have questions or concerns regarding our privacy policy or practices, you may contact us:
Email: privacy@spacex.com
Postal Mail: Space Exploration Technologies Corp., Attn: Privacy/Legal, 1 Rocket Road, Hawthorne, CA 90250