# CCPA Right to Know Response Template **From:** Meridian Analytics Ltd Privacy Office 47 Canary Wharf Tower, London E14 5AB **Date:** 14 March 2026 **To:** Jennifer Martinez 1247 Pacific Coast Highway Santa Monica, CA 90401 **Reference:** CCPA-2026-0201 **Subject:** Response to Your California Consumer Privacy Act Request --- Dear Ms Martinez, Thank you for your request received on 01 February 2026 under the California Consumer Privacy Act (CCPA). We have verified your identity and are providing the following information about the personal information we have collected about you in the preceding 12 months. ## 1. Categories of Personal Information Collected | CCPA Category | Collected | Examples | |---------------|-----------|---------| | Identifiers | Yes | Full name, email address, postal address, IP address, account ID | | Customer records | Yes | Payment card details (last 4 digits: 8472), billing address | | Protected classifications | No | N/A | | Commercial information | Yes | Subscription purchase (Enterprise plan, since August 2024) | | Biometric information | No | N/A | | Internet/electronic activity | Yes | Platform login timestamps, dashboard views, API queries, report downloads | | Geolocation data | Yes | Approximate location derived from IP address (city-level: Santa Monica, CA) | | Audio/visual information | No | N/A | | Professional/employment info | Yes | Job title (VP of Analytics), company name (Pacific Coast Data Solutions) | | Education information | No | N/A | | Inferences | Yes | Industry segment (financial services), usage tier (heavy), engagement score (87/100) | | Sensitive personal information | No | N/A | ## 2. Categories of Sources | Source Category | Description | |----------------|-------------| | Directly from you | Information provided during account registration and profile updates | | Automatically collected | Technical and usage data collected through your interaction with our platform | | Third parties | Companies House / Secretary of State business registry (business verification) | ## 3. Business or Commercial Purpose for Collection | Purpose | Category of PI Used | |---------|-------------------| | Providing analytics platform services | Identifiers, customer records, internet activity | | Account management and billing | Identifiers, customer records | | Platform security and fraud prevention | Identifiers, internet activity, geolocation | | Service improvement | Internet activity, inferences | | Customer support | Identifiers, commercial information | ## 4. Categories of Third Parties | Third Party Category | PI Categories Shared | Purpose | |---------------------|---------------------|---------| | Cloud hosting provider (AWS) | All categories listed above | Service infrastructure | | Payment processor (Stripe) | Identifiers, customer records | Subscription billing | | Customer support platform (Zendesk) | Identifiers | Support ticket management | We have not sold or shared your personal information with any third party for cross-context behavioural advertising purposes. ## 5. Your Rights You continue to have the following rights under the CCPA: - **Right to delete** your personal information - **Right to correct** inaccurate information - **Right to opt-out** of the sale or sharing of your personal information - **Right to non-discrimination** for exercising your CCPA rights To exercise any right, visit our privacy centre or email privacy@meridiananalytics.co.uk. Sincerely, **Dr Sarah Chen** Data Protection Officer Meridian Analytics Ltd