Virginia Privacy Notice Addendum

Table of contents

  1. Virginia Privacy Rights
  2. Rights of Virginia Consumers
  3. Verification Of Consumer Request and Timeline

Virginia Privacy Rights

This section supplements the Privacy Notice and applies only to Virginia residents. If you are a Virginia resident, the Virginia Consumer Data Protection Act – Va. Code Ann. §§ 59.1-575 to 59.1-584 (“VCDPA”) provides you with specific rights regarding your personal data, subject to certain exceptions. We collect the type of data described in this Virginia Privacy Notice Addendum and in the Privacy Notice, which includes personal data and sensitive data, as defined by the VCDPA, in the manner described herein and in the Privacy Notice. VCDPA defines “Personal Data” as any information that is linked or reasonably linkable to an identified or identifiable natural person. Personal Data does not include de-identified data or publicly available information. Personal Data that is excluded from the scope of the VCDPA includes: 

  1. covered entities or business associates covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and related federal laws and regulations, clinical trial data, or other qualifying research data;
  2. personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or the Farm Credit Act, and the Driver’s Privacy Protection Act of 1994;
  3. information collected from governmental organizations, non-profit organizations and higher education institutions; and
  4. data processed or maintained for employment purposes including emergency contact information or benefits administration.

If you do not provide the information that we ask for, we may not be able to provide you with the requested services. Sensitive data is a category of Personal Data that requires greater security protections and standards of care in handling. “Sensitive Data” is defined by the VCDPA as (1) Personal Data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, or citizenship or immigration status; (2) the processing of genetic or biometric data for the purpose of uniquely identifying a natural person; (3) the personal data collected from a known child; or (4) precise geolocation data. Subject to limited exceptions, we will only process your Sensitive Data with your consent.

Rights Of Virginia Consumers

If you are a Virginia resident the VCDPA provides you with specific rights regarding your Personal Data, subject to certain exceptions. These rights are explained below:

Verification Of Consumer Request and Timeline

To exercise any of your rights, please click here or you can also send a request in writing to PandaDoc, Inc., Attention: Privacy Department, 3739 Balboa St. #1083, San Francisco, CA 94121. 

To exercise your personal privacy rights, please click below for the applicable location:

EU (GDPR and UK GDPR) and the rest of the world

California, USA


Within sixty (60) days of receipt of your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may also contact the Attorney General here to submit a complaint.