Last updated: 3.28.23
California Shine the Light. The California “Shine the Light” law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties.
Right for minors to remove posted content. Where required by law, California residents under the age of 18 may request to have their posted content or information removed from the publicly-viewable portions of the Services by contacting us directly as set forth in Contact Us below or logging into their account and removing the content or information using our self-service tools.
FOR VERMONT RESIDENTS: We will not share information we collect about you with nonaffiliated third parties, except as permitted by Vermont law, such as to process your transactions or to maintain your account.
FOR NEVADA RESIDENTS: We are providing this notice to you pursuant to Nevada law. If you prefer not to receive marketing calls from us, you may be placed on our internal Do Not Call List by contacting us at firstname.lastname@example.org. Nevada law requires that we also provide you with the following contact information: Bureau of Consumer Protections, Office of the Nevada Attorney General, 555 E. Washington Street, Suite 3900, Las Vegas, NV 89101, phone number (702) 486-3132, email BCPINFO@ag.state.nv.us.
State laws may also provide you with specific privacy protections. We will comply with applicable state laws with respect to our use of your information.
FOR COLORADO, CONNECTICUT, VIRGINIA AND UTAH PRIVACY RIGHTS:
The section (Notice of Colorado, Connecticut, Virginia and Utah Privacy Rights) relates solely to residents of the States of Colorado, Connecticut, Virginia and Utah, and provides you with information about your privacy rights under the Colorado Privacy Act, the Connecticut Data Privacy Act, the Virginia Consumer Data Protection Act and the Utah Consumer Privacy Act.
This section shall be effective for the residents of those States on the dates set forth below:
Effective January 1, 2023, for residents of the State of Virginia
Effective July 1, 2023, for residents of the States of Colorado and Connecticut
Effective December 31, 2023, for residents of the State of Utah
For purposes of this section, “residents”, “consumers” or “you” means individuals of those states who are acting in their individual or household context. This section does not apply to individuals acting in their commercial or employment context.
For residents of the States of Connecticut, Virginia and Colorado, we will not process your sensitive information without first obtaining your consent; and
For residents of the State of Utah, we will not process your sensitive personal information without providing you with notice and an opportunity to opt out.
Exercising Your Rights
You may exercise your rights described above by submitting a request to us by:
Emailing us at email@example.com
We will only fulfill requests when we can verify your identity and confirm that you are authorized to make such a request.
Only you, as the parent or legal guardian on behalf of your minor child, or your authorized agent, guardian or conservator may make a request related to personal information. If an authorized agent, legal guardian or conservator submits the request, we may require your written permission to do so and may require additional information to authenticate your identity. We may deny a request by an authorized agent, legal guardian or conservator who does not submit proof of authorization to act on your behalf.
We will only use the personal information you provide in a request to verify your identity or authority to make the request.
Response Timing and Format
We will respond to an authenticated request within forty- five (45) days of its receipt, and will notify you within those forty-five (45) days if we require more time to respond and the reasons for the additional time.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
If we cannot comply with a request or a portion of the request, we will include the reasons in our response.
For residents of the States of Colorado, Connecticut and Utah, you may make one request within a twelve-month period at no charge. For residents of the State of Virginia, you may make a request up to two (2) times within a twelve (12) month period at no charge. We reserve the right to charge a fee to process or respond to any request that we consider excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Right to Appeal
You have the right to appeal our decision within a reasonable period of time after receipt of our response. You may appeal our decision by sending us an email at firstname.lastname@example.org. We will respond to your appeal within 60 days of receipt (45 days of receipt for residents of Colorado) and will inform you of any decisions and the reasons for such decisions.
Please note that in certain cases we may collect your personal information as a processor (as opposed to a controller, as those terms are defined in your applicable state privacy law) pursuant to a contract we have with a commercial client (the controller) to provide a service. In such a case, we are required to collect and process your information only based on the instructions received from the controller. Should you direct your requests to exercise your rights to us, we may be required to share your request with the controller, who is the party responsible under your applicable state privacy law for receiving, authenticating and responding to your requests.
This section (Notice of Colorado, Connecticut, Virginia and Utah Privacy Rights) does not apply to certain entities and data that are exempt from your applicable state privacy law, including but not limited to the following: covered entities, business associates and protected health information governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH); financial institutions and personal information subject to the Gramm-Leach-Bliley Act (GLBA); and personal information collected, processed, sold, or disclosed pursuant to certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Family Educational Rights and Privacy Act, the Farm Credit Act and the Driver’s Privacy Protection Act of 1994 (DPPA).