CCPA/CPRA Privacy Policy

CCPA/CPRA Privacy Notice (California Residents) 
Last Updated: March 3, 2026 
 
This California Privacy Notice ("Notice") supplements the information contained in Navien, Inc.'s Privacy Policy and applies solely to all consumers and households who reside in the State of California ("consumers" or "you"). Navien, Inc. ("Navien," "we" or "us") adopts this notice to comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, the "CCPA"). Any terms defined in the CCPA have the same meaning when used in this Notice. 
 
I. PERSONAL INFORMATION WE COLLECT 
Navien's websites collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal information"). Provided below are the categories of personal information and whether the Website has, for business purposes, collected personal information from its consumers within at least the last twelve (12) months: 

• Category A: Identifiers – A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. Collected – YES; Shared – YES
• Category B: Personal information categories listed in the California Customer Records statute – A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information. Collected – YES; Shared – YES
• Category C: Protected classification characteristics – Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex, sexual orientation, veteran or military status, genetic information. Collected – NO; Shared – NO
• Category D: Commercial information – Records of personal property, products or services purchased, obtained, or considered. Collected - YES; Shared – YES
• Category E: Biometric information – Genetic, physiological, behavioral characteristics, fingerprints, faceprints, sleep, health data. Collected - NO; Shared – NO
• Category F: Internet activity – Browsing history, search history, website interactions. Collected - YES; Shared – YES
• Category G: Geolocation data – Physical location or movements (NaviLink GPS). Collected - YES; Shared – YES
• Category H: Sensory data – Audio, electronic, visual information. Collected - NO; Shared – NO
• Category I: Professional/employment-related – Job history, performance evaluations. Collected - NO; Shared – NO
• Category J: Non-public education information – Student records, grades, transcripts. Collected - NO
• Category K: Inferences – Consumer profiles, preferences, behavior. Collected – NO; Shared – NO 
• Category L: Sensitive Personal Information – Social security, driver's license, precise geolocation, financial account + access credentials. Collected – YES; Shared – Limited 

Personal information does not include: Publicly available information, deidentified/aggregated data, HIPAA/CMIA-protected health data. 
 
II. SOURCES OF PERSONAL INFORMATION WE COLLECT 

• Directly from you (forms you complete, products/services purchased)
• Indirectly from you (observing/logging actions on Website)
• From third-party vendors (Smartsheet for WEC Registration processing) 

III. BUSINESS OR COMMERCIAL PURPOSES FOR USING PERSONAL INFORMATION 
We use/disclose personal and sensitive personal information for: 

• Fulfilling requests (warranty registration, service inquiries)
• Providing services/communications about products, warranties, safety notices
• Processing orders, returns, account management
• Personalizing experiences, targeted offers (with consent where required)
• Business operations (fraud prevention, market research, product improvement)
• Legal compliance, investigations, mergers/acquisitions 

IV. RETENTION 

Navien retains data as long as necessary for stated purposes, legal obligations, or claims. Warranty registrations retained minimum 10 years for claims processing. Inquiries retained 3 years post-resolution. Legal holds as required. 
 
V. YOUR RIGHTS UNDER CCPA/CPRA 
California residents have these rights: 

• Right to Know: Categories collected, disclosed, sold (past 12 months)
• Right to Delete: Subject to exceptions (warranty records)
• Right to Correct: Inaccurate personal information
• Right to Limit: Use/disclosure of sensitive personal information
• Right to Opt-Out: "Sale" (none) or "sharing" (cross-context ads) 

Global Privacy Control (GPC): Automatically honored for opt-out requests. 

No Sale: We do not sell personal information. Limited "sharing" with service providers (Google Analytics, Smartsheet). No sale/sharing of minors under 16 without opt-in. 

Non-Discrimination: Same price/service regardless of rights exercised. 

Submit Requests: https://www.navieninc.com/contact | 800-519-8794 | contactus@navien.com   

Verification: First/last name, email, postal address, state of residence 

Response Time: 45 days (+45 day extension possible) 

Frequency Limit: Right to Know requests limited to 2 per 12 months 

Contact: Navien, Inc., 20 Goodyear, Irvine, CA 92618 | (800) 519-8794