Your information. Your rights.
This notice supplements the CoreGrid Power Privacy Policy. It applies to California residents if and to the extent the California Consumer Privacy Act, as amended, applies to CoreGrid and the information involved.
CoreGrid is an enterprise software and services business, not a data broker.
Under our current practices, we do not share personal information for that purpose.
California privacy requests may be submitted directly to our privacy contact.
When CoreGrid processes personal information only for a customer, that customer is responsible for the applicable privacy response. CoreGrid will direct the request appropriately and assist as required by contract and law.
1. Notice at collection
The table below describes categories of personal information CoreGrid may collect, representative examples, the principal purposes for collection and use, and the criteria used to determine retention. CoreGrid collects only information reasonably necessary and proportionate for the disclosed purposes.
Categories collected or potentially collected| Category | Representative examples | Primary purposes | Retention criteria |
|---|---|---|---|
| Identifiers and business contact information | Name, business email, telephone number, company, job title, account identifier, IP address | Accounts, authentication, service delivery, support, communications, security, and relationship management | Relationship duration, customer instructions, security needs, and legal or business record requirements |
| Professional and commercial information | Organization, role, product interest, proposals, subscriptions, transactions, invoices, purchase orders, and remittance information | Provide services, manage opportunities and transactions, billing, accounting, audit, and compliance | Transaction lifecycle and applicable contractual, accounting, tax, audit, and legal requirements |
| Internet or electronic activity | Browser, device, operating system, referring page, access time, feature interaction, diagnostic data, and security logs | Operate, secure, troubleshoot, measure, and improve the website and services | Operational usefulness, security risk, system configuration, and legal requirements |
| Communications | Inquiries, support requests, meeting records, feedback, and correspondence | Respond, provide support, document decisions, improve services, and manage relationships | Relationship duration, relevance to the request or project, and legal or business record requirements |
| Customer and project content | Project documents, specifications, schedules, drawings, supplier information, assignments, approvals, and decisions that may contain personal information | Provide customer-directed platform functions and support project, supplier, procurement, and delivery workflows | Customer instructions and agreements, project lifecycle, security needs, and legal requirements |
CoreGrid does not intentionally collect government identifiers, precise geolocation, biometric information, health information, or consumer account credentials through its public website. Customer-provided content may incidentally contain additional information, which CoreGrid processes under the applicable customer agreement.
2. Sources and business purposes
Sources
We may collect personal information directly from you; automatically when you use our websites or services; from your employer or organization; from customer-authorized project participants; from suppliers, manufacturers, and business partners; from service providers; and from lawful public sources.
Business and commercial purposes
We may use the categories above to provide and secure the services; process customer-directed project content; administer accounts and transactions; communicate and provide support; improve products; manage customer, supplier, and partner relationships; protect rights and systems; complete corporate transactions; and meet legal obligations.
3. Disclosures for business purposes
During the preceding 12 months, CoreGrid may have disclosed the categories below for business purposes. A disclosure to a service provider or customer-authorized participant is not necessarily a sale or sharing under California law.
Categories and recipient types| Information category | Categories of recipients |
|---|---|
| Identifiers and business contact information | Hosting, security, communications, customer-management and support providers; professional advisers; customer-authorized participants; legal authorities where required |
| Professional and commercial information | Customer-management, billing, accounting and transaction-support providers; professional advisers; customer-authorized participants |
| Internet or electronic activity | Hosting, security, diagnostic, and service-performance providers |
| Communications | Communications and support providers; professional advisers; customer-authorized participants where relevant |
| Customer and project content | Hosting and document-processing providers; the applicable customer; suppliers, manufacturers, engineers, contractors, and other customer-authorized project participants |
We may also disclose relevant categories to parties involved in a financing, merger, acquisition, reorganization, diligence process, asset transfer, or similar corporate event, and as required to comply with law or protect rights, safety, property, or service integrity.
4. Sale, sharing, and sensitive information
CoreGrid has not sold personal information as that term is defined by the CCPA during the preceding 12 months. Under our current practices, CoreGrid has not shared personal information for cross-context behavioral advertising during that period.
CoreGrid does not use or disclose sensitive personal information to infer characteristics about individuals or for purposes that require a right to limit under California law. If our practices change in a way that creates an applicable opt-out or limitation right, we will update this notice and provide the required mechanism.
Because CoreGrid does not currently sell or share personal information for cross-context behavioral advertising, an opt-out preference signal does not change our current processing. If those practices change, we will recognize qualifying signals as required by law.
5. California privacy rights
Subject to applicable law, verification, and exceptions, California residents may have the right to:
- Know the categories and specific pieces of personal information CoreGrid has collected.
- Know the categories of sources, purposes, and recipients associated with that information.
- Request deletion of personal information.
- Request correction of inaccurate personal information.
- Receive certain personal information in a portable format.
- Opt out of the sale or sharing of personal information, if applicable.
- Limit certain uses and disclosures of sensitive personal information, if applicable.
- Receive equal service and pricing without unlawful discrimination for exercising privacy rights.
CoreGrid does not knowingly sell or share the personal information of individuals under 16.
6. Submitting and verifying a request
Email privacy@coregridpower.com with “California Privacy Request” in the subject line. Describe the right you wish to exercise and the CoreGrid relationship, account, communication, or project involved. You do not need to create an account to submit a request.
We may request information reasonably necessary to verify your identity, authority, and request. We use verification information only for the verification and response process. We may deny or limit a request where permitted by law and will explain the basis when required.
Authorized agents
An authorized agent may submit a request as permitted by law. We may require evidence of the agent’s authority and may ask the resident to verify their identity or confirm the authorization directly with CoreGrid.
Response and appeal
We will confirm and respond within the periods required by applicable law. If additional time is permitted and reasonably necessary, we will explain the extension. If applicable law provides an appeal right, instructions will be included in the response.
7. Contact and updates
We may update this notice as our practices or legal obligations change. We will post the revised notice with a new effective date and provide additional notice where required.
CoreGrid Power, Inc.
California privacy contact