The disclosures the CCPA and CPRA require: categories of personal information collected and the business purpose for each, the rights available to California residents, how to exercise them, and a plain statement of whether personal information is sold or shared.
Customer conversation content is never sold and never shared for cross-context behavioural advertising. Marketing analytics on this site may constitute sharing under the statute's broad definition, which is why those cookies are gated behind consent and why an opt-out control is available in the footer.
Where an agent handles health information, that is sensitive personal information under the statute and its use is limited to providing the service the caller requested. It is not used for inference, profiling, or any secondary purpose, and the retention window is set by the controlling business.