Under the CCPA and CPRA, we may decline to delete your Personal Information under certain circumstances, for example, if we need the Personal Information to complete transactions or provide services you have requested or that are reasonably anticipated, for security purposes, for legitimate internal business purposes (including maintaining business records), to comply with law, or to exercise or defend legal claims. Note also that we are not required to delete your Personal Information that we did not collect directly from you.