Effective as of 8 June 2022
Beginning 1 January 2020, the California Consumer Privacy Act ("CCPA") gives California residents certain rights with respect to the processing of personal data (known as "personal information" under the CCPA).
Right to know request - Under the CCPA, you have a right to request information about our collection, use, and disclosure of your personal information over the prior 12 months, and ask that we provide you with the following information:
- Categories of and specific pieces of personal information we have collected about you.
- Categories of sources from which we collect personal information.
- Purposes for collecting personal information.
- Categories of third parties with which we share personal information.
- Categories of personal information disclosed about you for a business purpose
- If applicable, categories of personal information sold about you and the categories of third parties to which the personal information was sold, by category or categories of personal information for each third party to which the personal information was sold.
To make a verifiable request for information about the personal information we have collected about you, please access your Privacy Settings in your account profile and use the "Download your data" tool. If you need assistance, we can also help you access your data if you contact our customer support via our chat bot or email us at firstname.lastname@example.org.
Right to delete request - You also have a right to request that we delete personal information, subject to certain exceptions. You may exercise your right to delete by contacting our customer support via our chat bot or emailing us at email@example.com.
Household requests - We currently do not collect household data. If all the members of a household makes a Right to Know or Right to Delete request, we will respond as if the requests are individual requests.
Requests, generally - Please note, if you do not have a Spotify account we will not have enough information about you to verify your Right to Know and Right to Delete requests, as we do not keep sufficient information necessary to reidentify and link you to a prior visit to the Spotify Service where data may have been collected. As such, we will be unable to verify and honor your requests. You may make a verifiable consumer request related to your personal information twice per 12-month period. We will not discriminate against you for exercising any of your rights under the CCPA.
Requests made through agents - You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.
- User Data
- Usage Data
- Plan Verification Data
- Payment and Purchase Data
- Contests, Surveys and Sweepstakes Data
We do not sell personal information. We have taken substantial steps to identify and remediate any data sharing arrangements that could constitute a "sale" under the CCPA.
We will continue to update our business practices as regulatory guidance becomes available and provides clarity on what constitutes a sale transaction, particularly in the advertising ecosystem.
The following chart contains statistics about global verifiable requests we received from consumers between 1 January and 31 December 2021:
|Type of request||Received||Complied||Denied||Average response rate|
|Right to Know||457,465||457,465||0||4 days|
|Request to Delete||2,298,607||2,298,607||0||15.5 days|