APOLLO

Dear Alex,

On behalf of Apollo, we are pleased to assist you in exercising your access rights under GDPR and/or CCPA. You may exercise your access rights as follows.

If you wish to remove the personal information that we have that is tied to your email address, then please respond to this communication by submitting the attached Identify Verification Form. We will then respond to your access request upon further email verification.

Why we require this: We require the above because GDPR and CCPA asks that we verify your identity to a reasonable degree of certainty before providing information: this is important, to avoid providing personal information to someone “spoofing” an identity. We believe this process provides that reasonable certainty while avoiding having consumers send us personal government IDs, which contain sensitive information and which we prefer not to receive. (And, unlike companies that deal directly with you, it’s not possible for us to verify you based on our prior relationship – like, by having you list your last movies watched, clothes purchased, or trips booked.)

If you prefer to avoid the above process, you can learn detailed information about the categories of personal information that Apollo collects, and how we source it, sell it, and use it for business purposes, by reviewing our Privacy Policy (available at: https://www.apollo.io/privacy). That Privacy Policy also will tell you how to easily opt out of our marketing databases.

Thank you for your interest in our business and data practices.

Threatening to tattle to an imaginary lawyer just gets you written off as an angry whack job.

Not commenting on the particulars of this case (you might be right in this particular instance), as a general statement this is not true. Consent is only one of several possible legal grounds for processing personal data. Generally, data controllers want to avoid it if possible in lieu of more convenient grounds. Nitpicking more, explicit consent is mentioned only as a processing ground for so called special category data, i.e. certain sensitive data, e.g. health data, requiring an additional legal ground.

Lists of people who invested in companies, culled from public disclosures, or names of corporate board members and such, aren’t the same thing as private PII.