California Residents

California Privacy Notice

Effective: October 1, 2026

Notice to California Residents

This California Privacy Notice supplements the Keryex Privacy Policy and explains the rights and protections available to California residents under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").

This notice applies to California residents whose personal information is collected or processed through Keryex.com and associated Services.

Where applicable, this notice describes the categories of information collected, the purposes of processing, how information may be disclosed, and the methods available to exercise privacy rights.

In the event of a conflict between this notice and our general Privacy Policy, this notice governs to the extent required by California law.

Categories of Personal Information

Depending on how individuals interact with our Services, Keryex may collect or process the following categories of personal information:

Identifiers

Names, usernames, email addresses, IP addresses, account identifiers, and authentication-related identifiers.

Customer and Commercial Information

Subscription records, purchased services, transaction identifiers, billing-related information, and customer support history.

Internet and Electronic Network Activity

Browsing activity, website interactions, referring URLs, session activity, device information, and technical diagnostics associated with our Services.

Geolocation Information

Approximate geographic information inferred from an IP address or related network information. We do not require precise device geolocation for ordinary access to our news coverage.

Audio, Electronic, and Visual Information

Images, videos, documents, messages, and other electronic materials voluntarily provided through our Services or editorial submission channels.

Professional Information

Employment, organizational affiliation, professional title, or related information voluntarily provided by contributors, business contacts, and newsroom personnel.

Sensitive Personal Information

Certain account authentication details, financial account information handled in connection with transactions, or sensitive information voluntarily submitted through support or editorial channels.

Keryex does not require government identification numbers, biometric identifiers, or detailed financial account credentials for ordinary access to our public journalism.

The categories applicable to a particular individual depend on the services used and the information voluntarily provided.

Sources of Personal Information

Personal information may be obtained from:

- Individuals who register, subscribe, or communicate directly with Keryex.
- Browsers, devices, and automated website technologies.
- Authentication providers and user-authorized integrations.
- Payment processors and subscription service providers.
- Customer support communications.
- Editorial submissions and professional correspondence.

We may also receive relevant information from publicly accessible sources in connection with legitimate journalistic activities.

Purposes for Collection and Use

Keryex collects and processes personal information for operational and legitimate business purposes, including:

- Maintaining user accounts and authentication systems.
- Delivering journalism, subscriptions, and requested services.
- Processing transactions and managing subscription access.
- Providing customer support and responding to communications.
- Maintaining security and preventing fraudulent activity.
- Measuring website traffic and service performance.
- Delivering requested notifications and communications.
- Investigating technical issues.
- Complying with applicable laws and legal obligations.

We do not use sensitive personal information to develop advertising profiles based on sensitive personal characteristics.

Personal information will not be collected, used, or retained for purposes incompatible with the disclosed purposes without providing any additional notice or consent required by law.

Disclosure of Personal Information

Keryex may disclose relevant categories of personal information to authorized service providers and contractors supporting our operations.

These may include:

- Website hosting, cloud infrastructure, and database providers.
- Authentication and identity verification services.
- Payment processors and subscription management services.
- Analytics and performance measurement providers.
- Email and push notification delivery services.
- Customer support and technical service providers.

The categories disclosed depend on the service performed. For example, hosting providers may process online identifiers and technical activity, payment processors may process commercial information, and authentication providers may process account identifiers.

Disclosures may also occur when required by law, necessary to protect legal rights, or associated with an authorized business transaction.

Sale and Sharing of Personal Information

Keryex does not sell personal information to data brokers in exchange for monetary compensation.

Under California law, however, the terms "sale" and "sharing" can encompass certain disclosures involving advertising or online tracking technologies, even when no money is exchanged.

Third-party analytics integrations may receive device identifiers, online activity, or related information when enabled. Whether these disclosures constitute a sale or sharing under California law depends on how those integrations are configured and used.

Where Keryex engages in activities covered by the CCPA's sale or sharing provisions, California residents are entitled to opt out using the methods made available by Keryex.

Keryex does not knowingly sell or share personal information belonging to individuals under 16 without the affirmative authorization required by California law.

California Privacy Rights

California residents have the following rights to the extent provided by applicable law.

Right to Know

You may request information about the categories and specific pieces of personal information collected about you, the sources of that information, the purposes for which it is used, and the categories of recipients to whom it has been disclosed.

Right to Delete

You may request deletion of personal information collected about you, subject to applicable legal exceptions.

Certain information may be retained when necessary to complete transactions, maintain security, comply with legal obligations, or exercise or defend legal rights.

Right to Correct

You may request correction of inaccurate personal information maintained by Keryex, taking into account the nature and purpose of that information.

Right to Opt Out of Sale or Sharing

You may direct businesses subject to the CCPA not to sell or share your personal information, including sharing for cross-context behavioral advertising.

Right to Limit Sensitive Personal Information

Where applicable, you may request restrictions on the use or disclosure of sensitive personal information beyond certain purposes permitted under California law.

Right to Equal Treatment

Keryex will not unlawfully discriminate against California residents for exercising their privacy rights.

Exercising these rights will not result in unlawful denial of services, penalties, or reductions in service quality.

Exercising Your Rights

California residents may submit privacy requests by contacting:

Keryex — Privacy Team
Email: [email protected]
Website: https://keryex.com

Please identify the nature of your request, such as access, deletion, correction, or an applicable opt-out.

We may request additional information reasonably necessary to verify your identity before fulfilling access, deletion, or correction requests.

Verification information will be used only for appropriate verification, security, and compliance purposes.

Keryex will acknowledge qualifying requests within the time required by law and generally respond to verified access, deletion, and correction requests within 45 calendar days. Where permitted, an extension of up to 45 additional days may apply with notice.

Qualifying opt-out and limitation requests will be processed as soon as reasonably feasible and within the applicable legal deadline.

Authorized Agents

California residents may designate an authorized agent to submit certain privacy requests on their behalf.

Keryex may require reasonable documentation of the agent's authorization and may request direct identity verification from the resident where permitted by law.

We will not deny a valid request solely because it is submitted through an appropriately authorized representative.

Global Privacy Control

The Global Privacy Control ("GPC") is a browser-based privacy preference signal that can communicate a user's request to opt out of certain sales or sharing of personal information.

Where required by California law, Keryex will treat recognized and valid opt-out preference signals as requests to opt out of covered sale or sharing activities.

Browser settings or other available privacy controls may also allow users to limit nonessential cookies and tracking technologies.

Data Retention

Keryex retains personal information for periods reasonably necessary to meet the purposes for which it was collected.

The applicable retention criteria include:

Account identifiers and profile information: The duration of the account relationship and any additional period required to fulfill legal, security, or operational obligations.

Subscription and transaction records: Applicable accounting, payment dispute, contractual, and legal retention requirements.

Support correspondence: The period necessary to manage customer relationships, resolve inquiries, and maintain appropriate records.

Internet activity and analytics data: Configured analytics retention periods and reasonable operational and security requirements.

Authentication and security records: The period needed to maintain account security, investigate incidents, and meet applicable obligations.

Editorial submissions: Legitimate journalistic, archival, source-protection, and legal considerations, including any applicable exemption under California law.

Where information is no longer reasonably necessary, Keryex will delete, de-identify, or otherwise dispose of it as appropriate.

Sensitive Personal Information

Sensitive personal information may receive additional protection under California law.

Keryex uses sensitive personal information for purposes reasonably necessary to provide requested services, authenticate users, process transactions, protect account security, comply with applicable law, or carry out other permitted activities.

We do not use sensitive personal information for targeted advertising based on sensitive personal characteristics.

Where the right to limit applies, California residents may submit an applicable limitation request through our privacy contact.

Minors

Keryex does not knowingly sell or share the personal information of California residents under 16 without the authorization required by law.

Our Services are not directed to children under 13, and we do not knowingly collect their personal information without any parental authorization required by applicable law.

Parents or guardians may contact us concerning personal information believed to have been collected from a minor.

Information Used for Journalism

Keryex operates as a news and information organization engaged in reporting, research, analysis, and editorial publication.

Certain information collected or maintained for journalistic purposes may be subject to specific legal protections, exceptions, or limitations under applicable law.

Nothing in this notice should be interpreted as requiring disclosure of confidential journalistic sources, privileged information, or protected editorial materials where such disclosure is not legally required.

We will evaluate applicable privacy requests in accordance with both California privacy law and relevant legal protections for journalism.

Updates to This Notice

Keryex may revise this California Privacy Notice to reflect changes in legal requirements, technology, or information processing practices.

Updated versions will be made available on Keryex.com with the appropriate revision date.

We will provide additional notice when required by applicable law.

Contact

For California privacy inquiries or requests concerning personal information:

Keryex — Privacy Team
Email: [email protected]
Website: https://keryex.com

California residents may also obtain information about their privacy rights from the California Privacy Protection Agency at https://cppa.ca.gov.