Last updated: March 30, 2022

What is covered by this Privacy Notice

This Privacy  Notice (the “Privacy Notice”) explains how we, Calix, Inc. and our subsidiaries, collect, share and use personal information collected by us in connection with (i) your accessing Calix’s website located at www.calix.com and any associated URLs owned or controlled by Calix (collectively, the “Website”), any content or features available on the Website, and your interactions with Calix in connection with such access, including registrations for our events through the Website, as well as (ii) the provision of our proprietary operating system platforms (“Platform”) and cloud-based subscription services that operate on our Platform (collectively, “Calix Cloud”, and together with “Platform”, the “Services”) to you, a Calix customer, in relation to your employees, agents or authorized users (collectively “you”). For this Privacy Notice, personal information refers to information directly or indirectly relating to an identified or identifiable natural person.

Calix understands the importance of privacy and security. We are committed to providing a secure environment to protect the personal and private information provided by you in connection with your purchase, subscription to and use of the Services. Calix is not obligated to appoint a data protection officer; however, Calix has done so as a best practice. 

This Privacy Notice covers:

• the personal information of your representative that you may provide to us in the purchase and subscription to the Services; and
• Calix’s practices associated with collecting, using, retaining, disclosing, and protecting the information associated with your use of the Website and the use of the Services by you.

Children Under the Age of 16

The Services are not intended for children under 16 years of age, and we do not knowingly collect personal data of children under 16. If you believe we might have any information from or about a child under 16, please contact us at productprivacy@calix.com.

Collection of Customer Representative Information

Calix collects customer and customer representative information provided directly by you as part of your purchase and subscription to the Services. Specifically, this information includes:

• contact information for your employees, agents and representatives that correspond with Calix;
• user credentials for your employees, agents and representatives designated by you as users to access and manage your use of the Services on the applicable Calix hosted portals;
• contact information provided by your employees, agents and representatives upon registration of their user account for Calix hosted portals for the applicable Services; 
• indication of the products, services and additional information in which you are interested;
• recordings of calls to Calix customer support teams; 
• responses to surveys; 
• manage visitors to our physical sites; and
• browser and device information and session cookies, including session recording, IP address, MAC address, demographic information and other similar information provided by you (e.g., language, occupation) related to your employees, agents and representatives that access and use the Calix hosted portals through user accounts for the applicable Services.

Calix also enriches Customer and customer representative information with data purchased from third parties.

How We Use the Information Collected

Calix uses the information collected as described in this Privacy Notice to:

• confirm user identity when logging in for use of the Services;
• offer and demonstrate the Services to you for purposes of evaluation by you;
• provide you with the subscribed Services as described in the user documentation for the Services or authorized in the applicable Terms;
• use user-associated analytics to improve the quality of customer experience, including personalized advertisements and content;
• promoting security of our websites and physical sites;
• manage event registrations and attendance, including surveys;
• enforce our rights arising from any contracts entered into between you and Calix;
• comply with legal obligations;  and
• fulfill any other purpose authorized by you and reasonably required for the Services.

We may also use the information collected by the Services as described in this Privacy Notice, including personal information, to inform you about goods and services that may be of interest to you.

Lawful basis of processing

We are a controller of Customer representative information. The legal basis for our processing Customer representative information is furthering our legitimate interests in delivering Services to our Customers in accordance with the contract entered into and in marketing our services. We also process Customer representative information to comply with legal obligations or to pursue other legitimate interests, such as protecting our network or enforcing our rights, or the legitimate interests of third parties. If we were ever subject to a lawful request for Customer representative data, the processing required to respond to the request would be necessary for us to comply with a legal obligation.

Disclosure of Information

We do not sell or otherwise distribute or disclose your information to third parties other than as described or authorized in the relevant Terms and user documentation, including this Privacy Notice.

The Services and the Website are cloud-based and we utilize third-party webhosting services to host the Services and the Website.  We disclose your information:

• to Calix subsidiaries, affiliates and certain authorized third-party vendors and contractors that provide development, integration and consulting services to us for the purpose of providing you with the subscribed Services, to maintain, support, develop, improve and/or enhance the Services and to fulfill our obligations associated with the Services;
• to our authorized service providers and suppliers who provide services to us such as website hosting, data analysis, information technology and related infrastructure services, customer service, email delivery, auditing and similar services for the purpose of enabling them to provide such services;
• to third parties to permit them to send you marketing and other communications you have elected to receive, subject to your designated communication preferences;
• to third-party event organizers, logistics coordinators, and hotels, restaurants or other event host locations (virtual or physical), where you have registered for an event sponsored by Calix;
• in connection with subscription services to web-based applications as specified in the applicable terms of service for such applications;

We are also required to disclose information under certain circumstances:

• to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• to enforce our rights arising from any contracts entered into between you and Calix;
• if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Calix, our customers or other third parties; 
• with our professional advisors, such as auditors, law firms or accounting firms, as service providers; or
• to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which your information held by us are among the assets transferred.
  

Our Data Retention Practices

Your information is retained and used as described in this Privacy Notice. In the event you have terminated the applicable agreements for the Services in accordance with the terms of such agreements, information that is not required for any other Services or agreement will be deleted within 30 days of the effective date of such termination.

Our use of Cookies:

Your representatives who are users of Calix hosted portals may set their browser to refuse all or some browser cookies or may amend their preferences in our cookies preference center, or may set their browsers to alert them when cookies are being sent. Calix does not honor browser do not track signals. If cookies are disabled or refused or if your representatives block the use of other tracking technologies, some parts of the Services may then be inaccessible or not function properly. Please refer to our cookies policy for more information about cookies.

Data Subject Rights

Right to Access and Correction: Your representatives that have created user accounts on a Calix product portal can (a) access and review their information, and (b) correct their account and contact information, by logging into their accounts on the product portal and visiting their account profile page. Certain product portal account user information can only be corrected by contacting us using the “Contact” weblink and help form available on the applicable product portal page.  You may also request access to your information by submitting a Request Form (clicking the link will take you to TrustArc, whom we have engaged to assist with such requests). 

Right to Erasure: Your representatives have the right to delete the personal information we hold about them, in certain circumstances. Your Customer representative information on Calix hosted portals for the Services is managed by you and you may remove any of your representatives from access to such portals at any time by deleting the applicable portal accounts. However, your representatives whose accounts have been deleted will no longer be able to access the Services.

Right to Object to Marketing: Customer representatives can opt-out of marketing at any time by clicking the unsubscribe link contained in the marketing, or by submitting a request via this Request Form (clicking the link will take you to TrustArc, whom we have engaged to assist with such requests). 

Some of these rights only apply in certain circumstances and, in many cases, are limited by law. For example, where fulfilling your request will adversely affect other individuals or our trade secrets or intellectual property, where there are overriding public interest reasons or where we are required by law to retain your personal information. We will respond to your requests to exercise these rights as required by applicable law. To exercise any of your rights, please contact us at the contact details set out below.

Data Security

Calix technical and organizational measures for security are set forth in detail here.

Transfers of personal information outside the European Union and the UK

As we are an international business, your personal information will be transferred to, and stored at/processed in countries outside the European Economic Area (“EEA”) and the United Kingdom (“UK”), including to the U.S. to provide the Services under the terms of our contract with you. We take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Privacy Notice. When we transfer your personal information to third parties located outside the EEA/UK, we will put in place appropriate safeguards to ensure that this transfer complies with applicable data protection laws. These measures include entering into the EU and UK standard contractual clauses to transfer personal data from the EEA and the UK to countries that may not have adequate protection for personal data. If necessary, we will implement supplementary measures to reduce or eliminate any risks to the personal information transferred. For more information about these safeguards, or if you wish to examine a copy of the standard contractual clauses we have in place, please contact us using the contact details set out below.

Changes to this Privacy Notice

This Privacy Notice will be updated from time to time. All updates and amendments are effective immediately upon our posting a revised version of this Privacy Notice on the My Calix insider portal accessible by our customers. You are encouraged to review this Privacy Notice periodically to stay informed of updates and changes that may affect you. The last revision date is under the title of this Privacy Notice.

Contact Information

To ask questions or comment about this Privacy Notice and Calix’s privacy practices for the Services, contact Calix via e-mail at privacy@calix.com or via post to: Calix Legal Department – Data Protection Office, 2777 Orchard Parkway, San Jose, CA 95134, USA. If you have a complaint about how Calix has handled your personal information, please contact Calix’s data protection officer by email at privacy@calix.com. Calix’s data protection officer will investigate and report back to you. In Europe, you also have the right to complain to the data protection authority in the country where you live or work or where you consider we infringed data protection laws. For Europe, those authorities are listed at:  Our Members | European Data Protection Board (europa.eu). In the UK, you can file a complaint with the UK Information Commissioner’s Office.