Versium

Privacy Notice for Iowa Residents

Privacy Notice for Iowa Residents

REVISED 02/16/2025

This PRIVACY POLICY FOR IOWA RESIDENTS (“Iowa Privacy Policy” or “Privacy Policy”) is provided by Versium and its subsidiaries (collectively, “we,” “us,” or “our”) and applies to natural persons who reside in the State of Iowa (“consumer(s),” “resident(s),” “you,” or “your”). We explain in this Privacy Policy how we collect, process, use, sell and/or share your personal data, as required by the Iowa Consumer Data Protection Act (the “ICDPA”). We also outline below your rights under the ICDPA and how you may exercise those rights. 

“Personal data” under the ICDPA generally means any information that is linked or reasonably linkable to an identified or identifiable natural person. “Personal data” does not include de-identified or aggregate data or publicly available information. The ICDPA also does not generally apply to certain classes of data, including protected health information under HIPAA, scientific research data, consumer credit-reporting data, data regulated under the Health Information Technology for Economic and Clinical Health Act, data regulated under the Family Educational Rights and Privacy Act, data regulated under the Farm Credit Act, data regulated under the Children’s Online Privacy Protection Act, and data regulated under certain other federal statutes. 

Iowa residents have a right to know the following with regard to our collection and processing of their personal data:

  1. The categories of personal data we process.
  2. The purpose for which we process personal data.
  3. How Iowa consumers may exercise their rights under the ICDPA.
  4. The categories of personal data we share with third parties.
  5. The categories of third parties with whom we share your personal data.

 

The above information is broadly described in our general privacy policy, https://versium.com/privacy-policy. Below is a more detailed description of this information as it relates to Iowa consumers:

Category

Description

Categories of Third Parties to Whom We May Disclose this Information

Sources of Personal Information

Identifiers

Includes direct identifiers, such as name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, or other similar
identifiers.

-Vendors and service providers
-B2B Brands
-B2C Brands
-Data Aggregators
-Political Organizations
-Charitable Organizations
-Advertising, Marketing and Sales Organizations
-Real Estate Investors
-Advertising networks
-Analytics providers
-Social networks
-Government entities and law enforcement

Directly from our clients, or their agents related to the services for which they engage us. Directly or indirectly from activity on Sites (e.g., from submissions and website usage details). Advertising networks, Social networks, Internet providers, Government entities, Public Record Data, Data brokers/aggregators, Publicly available sources

Customer records

Includes personal information such as name, address, telephone number, education, employment and employment history.

-Vendors and service providers
-B2B Brands
-B2C Brands
-Data Aggregators
-Political Organizations
-Charitable Organizations
-Advertising, Marketing and Sales Organizations
-Advertising networks
-Analytics providers
-Social networks
-Government entities and law enforcement

Directly from our clients, or their agents related to the services for which they engage us. Directly or indirectly from activity on Sites (e.g., from submissions and website usage details). Advertising networks, Social networks, Internet providers, Government entities, Public Record Data, Data brokers/aggregators, Publicly available sources

Protected classifications, and Sensitive Personal Information

Includes characteristics of protected classifications under applicable laws, such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status and gender.

-Vendors and service providers
-B2B Brands
-B2C Brands
-Data Aggregators
-Political Organizations
-Charitable Organizations
-Advertising, Marketing and Sales Organizations
-Advertising networks
-Analytics providers
-Social networks
-Government entities and law enforcement

Directly from our clients, or their agents related to the services for which they engage us. Directly or indirectly from activity on Sites (e.g., from submissions and website usage details). Advertising networks, Social networks, Internet providers, Government entities, Public Record Data, Data brokers/aggregators, Publicly available sources

Commercial information

Includes records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

-Vendors and service providers
-B2B Brands
-B2C Brands
-Data Aggregators
-Political Organizations
-Charitable Organizations
-Advertising, Marketing and Sales Organizations
-Advertising networks
-Analytics providers
-Social networks
-Government entities and law enforcement

Directly from our clients, or their agents related to the services for which they engage us. Directly or indirectly from activity on Sites (e.g., from submissions and website usage details). Advertising networks, Social networks, Internet providers, Government entities, Public Record Data, Data brokers/aggregators, Publicly available sources

Usage data

Includes browsing history, search history, information on a consumer’s interaction with our Sites or advertisements.

-Vendors and service providers
-B2B Brands
-B2C Brands
-Data Aggregators
-Political Organizations
-Charitable Organizations
-Advertising, Marketing and Sales Organizations
-Advertising networks
-Analytics providers
-Social networks
-Government entities and law enforcement

Directly from our clients, or their agents related to the services for which they engage us. Directly or indirectly from activity on Sites (e.g., from submissions and website usage details). Advertising networks, Social networks, Internet providers, Government entities, Public Record Data, Data brokers/aggregators, Publicly available sources

Professional information

Includes professional or employment-related information, current or past job history or performance evaluations.

-Vendors and service providers
-B2B Brands
-B2C Brands
-Data Aggregators
-Political Organizations
-Charitable Organizations
-Advertising, Marketing and Sales Organizations
-Advertising networks
-Analytics providers
-Social networks
-Government entities and law enforcement

Directly from our clients, or their agents related to the services for which they engage us. Directly or indirectly from activity on Sites (e.g., from submissions and website usage details). Advertising networks, Social networks, Internet providers, Government entities, Public Record Data, Data brokers/aggregators, Publicly available sources

Inferences

Includes inferences drawn from other personal information we collect to create a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions and behavior.

-Vendors and service providers
-B2B Brands
-B2C Brands
-Data Aggregators
-Political Organizations
-Charitable Organizations
-Advertising, Marketing and Sales Organizations
-Analytics providers
-Social networks
-Government entities and law enforcement

Directly from our clients, or their agents related to the services for which they engage us. Directly or indirectly from activity on Sites (e.g., from submissions and website usage details). Advertising networks, Social networks, Internet providers, Government entities, Public Record Data, Data brokers/aggregators, Publicly available sources

Iowa Residents’ Rights and Choices

The ICDPA provides Iowa residents with specific rights regarding their personal and sensitive personal data. This section describes your ICDPA rights and explains how you may exercise those rights.

Right to Know

You have the right to know whether we process your personal information and, if so, to request that we disclose to you the information we process regarding you. If you are an Iowa resident, once we confirm you are the consumer whose data is requested, we will disclose to you (up to twice every 12 months) the personal information regarding you that we process. We may take up to 45 days after receiving your request to provide a response. You may make a request that we disclose to you the personal information about you we process by emailing [email protected] or calling us at 1-800-395-0164. 

Right to Request that We Delete Your Personal Data

You have the right to request that we delete your personal data that we collected once we receive your request and confirm your identity or authority to make the request.  You may make a request to delete your personal data by visiting www.versium.com/opt-out or calling us at 1-800-395-0164.

Right to Opt-out of our Sale of Your Personal Data

You have the right to request that we not process your personal data for the purposes selling the data to a third party.  You may make a request to opt-out of our processing your personal data by visiting www.versium.com/opt-out or calling us at 1-800-395-0164.

Your Rights Regarding Sensitive Personal Data

You have the right to request that we not process your sensitive personal data as defined in the ICDPA.  Sensitive data is a subset of personal data and includes any data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, or citizenship or immigration status, genetic or biometric data that is processed for the purpose of uniquely identifying a natural person, personal data collected from a known child, and precise geolocation data.

You may make a request to direct us not to process your sensitive data by emailing [email protected] or calling us at 1-800-395-0164. 

General Process for Submitting ICDPA Requests 

Iowa residents may submit their requests to exercise their ICDPA rights by following the methods described above for each specific right or generally by using one of the following methods: 

 

Only you or your authorized agent may make a verifiable consumer request related to your personal data.

The verifiable consumer request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom your request relates to or you are the appointed and authorized representative of the consumer on whose behalf you are submitting the request.
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

 

We cannot grant your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm that the personal data that is the subject of your request relates to you.  In some cases, we may request additional information in order to verify your request or where necessary to process your request.  If we are unable to adequately verify a request, we will notify the requestor.  

Right to Appeal Our Response to Your Request

If you have made a request to exercise any of your rights under the ICDPA and you are dissatisfied with our response you may request that our initial response be re-evaluated by submitting an “Appeal” of our decision by emailing [email protected] or calling us at 1-800-395-0164.  We will respond to your Appeal within 60 days after receiving it.  If you believe we are not complying with our obligations under the ICDPA you may also file a complaint with the Iowa Department of Justice by calling 1-888-777-4590 or emailing [email protected] .

Notice Regarding Personal Data of Minors

We do not knowingly collect, process, use, disclose, share or sell the personal information of individuals under the age of 18. 

Changes to Our Privacy Policy

We reserve the right to amend this Privacy Policy at our discretion and at any time. When we make changes to this Privacy Policy, we will notify you by email or through a notice on our website.