5
Services. This information is known as customer proprietary network information or “CPNI.” CPNI does not include your name, address, or telephone number, which is defined by the Communications Act
as “subscriber list information.” However, that information is otherwise considered personally identifiable information.
If you are a customer of Xfinity Voice or Mobile Service, or another Service that is subject to these requirements, you have the right, and Comcast has a duty, under the Communications Act and other
applicable laws, to protect the confidentiality of your CPNI. In addition, the FCC’s rules provide additional privacy protections and choices regarding use and sharing that are specific to our Voice and
Mobile service that we describe in this Policy.
ADDITIONAL INFORMATION REGARDING OTHER LAWS AND INDIVIDUAL RIGHTS
CALIFORNIA NOTICE AT COLLECTION
California law provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of “Personal Information,” rights to access, delete, correct certain Personal
Information we collect about them, restrict us from “selling” or “sharing” certain Personal Information, and limit our use of Sensitive Personal Information, as defined by the law and described in the
categories below. These rights apply to all residents of CA, regardless of whether you are a customer, business contact, or member of the workforce. As a California resident, you have a right not to
receive discriminatory treatment for the exercise of your privacy rights.
The California Consumer Privacy Act defines “Personal Information” to mean “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly
or indirectly, with a particular consumer or household.”
You or your authorized agent may submit a request to exercise these rights by visiting www.xfinity.com/privacy/requests or calling us at 1-844-963-0138. To opt out of targeted advertising and the sale
or sharing of Personal Information, or to set preferences regarding our use of Sensitive Personal Information, please visit the Xfinity Preferences Page (www.xfinity.com/privacy/your-privacy-choices) and
make the appropriate selections in the Settings menu of your relevant devices including X1, Flex, XClass and Xumo TV.
Residents of the State of California also have the right to request information regarding third parties to whom the company has disclosed certain categories of personal information during the preceding
year for the third parties’ direct marketing purposes under California’s “Shine the Light” law (Cal. Civ. Code §1798.83). Personal information under this California law means “any information that when it
was disclosed identified, described, or was able to be associated with an individual.” We do not disclose this type of personal information to third parties for their own purposes and we permit you to opt
out of any disclosures of non-identifiable personal information. However, if you are a California resident and would like to inquire further, please email Comcast_Privacy@comcast.com.
Learn more about your rights if you are a California resident and how to exercise them
Collection, Use, and Retention of Personal Information
The general section of this Privacy Policy describes the types of personal information we collect, how we collect it, how we use it in categories that are easy to understand. The CCPA requires us to
disclose the personal information we have collected about consumers in the following categories. Some of the categories include very different types of information within the same category and certain
personal information may fall into multiple categories. How we use and how long we keep the information within each category will vary
i
, and not all types of information within the same category will be
used for all the purposes listed.
California law also requires us to provide information regarding the criteria we use to determine the length of time for which we retain personal information. We utilize the following criteria to determine
the length of time for which we retain personal information:
• The business purpose for which the information is used, and the length of time for which the information is required to achieve those purposes;
• Whether we are required to retain the information in order to comply with legal obligations or contractual commitments, or is otherwise necessary to investigate theft or other illegal activities, to
ensure a secure online environment, or to protect health and safety;
• The privacy impact on the consumer of ongoing retention, including the consumer’s likely expectations in light of the sensitivity of information and our Privacy Commitments; and
• The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle in light of the volume and complexity of the systems in our infrastructure.
Individual pieces of personal information such as those listed above may exist in different systems that are used for different business or legal purposes. A different maximum retention period may apply
to each use case of the information. Certain individual pieces of information may also be stored in combination with other individual pieces of information, and the maximum retention period may be
determined by the purpose for which that information set is used.
Categories Examples Source Purpose of collection and use
Identifiers Name, alias, postal address, unique personal identifier, online
identifier, Internet protocol address, email address, account
name, Social Security number, driver’s license number, passport
number, or other similar identifiers
Directly from you when you provide it to us, such
as when you create an account
From our systems when we generate the
information and assign it to you, such as your
account number or your IP address from third
parties
From third parties
To offer or provide our Services
To make improvements to our existing Services
and create new products, services, or features
To provide marketing and advertising
To personalize our Services
Additional categories
of information listed
in the California
Customer Records
statute (Cal. Civ. Code
§ 1798.80(e))
A name, signature, Social Security number, physical
characteristics or description, address, telephone number,
driver’s license or state identification card number, education,
employment, bank account number, credit card number, debit
card number, or any other financial information. Some personal
information included in this category may overlap with other
categories
Directly from you when you provide it to us, such
as when you create an account or pay for your
Services
From third parties
To offer or provide our Services
To make improvements to our existing Services
and create new products, services, or features
To provide marketing and advertising
To personalize our Services
Protected
classification
characteristics under
California or federal
law
Age (40 years or older), national origin, marital status, gender,
veteran or military status
Directly from you when you provide it to us, such
as when you sign up for an offer for veterans
From third parties who make inferences regarding
your household, such as marital status or the age
ranges of people within your household
To offer or provide our Services
To make improvements to our existing Services
and create new products, services, or features
To provide marketing and advertising
To personalize our Services
Commercial
information
Records of personal property, products or services purchased,
obtained, or considered, or other purchasing or consuming
histories or tendencies
From you when you complete transactions with us
From third parties
To offer or provide our Services
To make improvements to our existing Services
and create new products, services, or features
To provide marketing and advertising
To personalize our Services
Biometric information Genetic, physiological, behavioral, and biological characteristics,
or activity patterns used to extract a template or other identifier
or identifying information, such as, fingerprints, faceprints, scans
of the hands or face geometry, and voiceprints, iris or retina
scans, keystroke, gait, or other physical patterns, and sleep,
health, or exercise data
Directly from you when you provide it to us, such
as when you seek to authenticate your identity
From our systems when you opt in to certain
features of our Services, such as Xfinity Home
security, that may collect information and generate
inferences about physical patterns to deliver the
Services and applicable features you have selected
To offer or provide our Services
To verify your identity
To make improvements to our existing Services
and create new products, services, or features
To protect the health and safety of our customers,
employees, contractors, or the general public