PRIVACY POLICY

Last Updated: March 5th 2025

Please read this Privacy Policy carefully before using the Site or our other Offerings, interacting with our email communications, or otherwise submitting personal information to us, to understand how we treat your personal information, as well as your choices and rights. If you do not agree with the terms and conditions of this Privacy Policy, you may not access or use the Site or our other Offerings.

Introduction

Lalechet Tours Corp. (“Lalechet ,” “we ,” “us ,” and “our ”) is committed to protecting the privacy and security of the personal information we collect, use, disclose, sell, share, retain, and otherwise process as part of our business. We also believe in transparency and are committed to informing you about how we treat the data we collect and process. We have established this Privacy Policy (the “Privacy Policy ”) to help you understand how we collect, use, disclose, share, and protect personal information. This Privacy Policy also explains how users can make choices about their personal information.

When we refer to personal information (sometimes referred to as personal data under certain laws) in this Privacy Policy, we mean information that identifies or can be used to identify an individual (“personal information ”). This includes information that involves direct identifiers (such as a name), as well as indirect identifiers (such as a computer or mobile device ID).

By accessing or otherwise using the Site or our other offerings, you agree to our Terms of Use and Terms of Sale, and consent to our personal data collection, use, and disclosure practices, as well as any other activities described in this Privacy Policy and any related privacy policies, notices, or statements that may be posted on any applicable part of the Site or our other Offerings. If you do not agree and consent, you are strictly prohibited from accessing or using the Site or our other Offerings .

You may obtain an accessible version of this Privacy Policy by contacting us using the contact details provided in the Contact Us section at the end of this Privacy Policy.

Scope & Applicability

This Privacy Policy describes our practices for collecting, using, and otherwise processing your personal information, and applies to our data practices when you interact with us, including, without limitation, the following:

  • Use of our website pages (collectively, the “Site ”), as well as any applications, products, services, events, and experiences that reference this Privacy Policy (together, our “Offerings ”).
  • When you submit personal information as part of a booking, or otherwise when you communicate or interact with us in connection with same.
  • Phone, text, and email communications with us.
  • Social media interactions on the Site, our other Offerings, and other third-party websites like Facebook, Instagram, and YouTube.
  • Viewing our emails or online advertisements.
  • Interactions with our authorized service providers.

This Privacy Policy also applies to personal information that we receive from business partners and other parties and process in our role as a data controller. This Privacy Policy does not, however, apply to the information, privacy, or security practices of any third parties, all of which maintain their own privacy policies. Nor does this Privacy Policy apply to our employees or job applicants.

Personal Information We Collect About You

We may collect, receive, or process the categories of personal information listed below. Please note, however, that not all categories of personal information will be collected, received, or processed about every individual.

  • Contact information and other personal identifiers , such as name, postal address, unique personal identifier, online identifier, telephone number, email address, government-issued identifier, and signature.
  • Business information , such as business contact information, including job title and company name, and other personal information to provide the Site and our other Offerings.
  • Commercial information , such transaction information, records of services purchased, and participation in promotional offers.
  • Financial information , such as credit card numbers, debit card numbers, and financial account numbers.
  • Internet or other electronic network activity information , such as date and time, Internet Protocol (“IP ”) address or unique device identifier, access time, cookies, browsing or search history, information about interactions with the Site and/or pages visited, social media information, and location data. For more information about our collection of Internet and other electronic network activity data, please see the Cookies & Similar Technologies section of this Privacy Policy.
  • Communications and inquiries , such as the content of emails, text messages, and other communications (where we are a party to the exchange), call logs, other information needed to respond to inquiries, and data relating to interactions with our email and other electronic communications.
  • Audio and visual information, such as images of government-issued identification documents.
  • Geolocation information , such as the physical location from where the Site or our other Offerings were accessed, or from where interaction with the Site or our other Offerings otherwise took place.
  • Demographic information, such as age and gender. We only collect this data when you choose to provide it to us.
  • Inferences drawn from other personal information , such as inferences reflecting individual preferences, interests, or characteristics.

How We Collect Personal Information

We collect personal information in a variety of ways, including through the methods listed below. In addition, we may obtain and combine personal information from different sources collected online and offline, including information from third-party sources across different types of technologies and devices.

  • From You Directly . We collect any personal information you provide to us in relation to your use of the Site or our other Offerings. Examples include, without limitation, when you contact us through our Site, electronic mail, or other similar forms of communication; use our platform to make a booking; sign up to receive offers or information; join electronic mailing lists; and enter a contest or sweepstakes.
  • Through Automatic Means . We automatically collect certain types of information, which may include personal information, regarding use of the Site from your computer and/or mobile device, such as your device information collected through tracking technologies or data analytics collected on our website. Some automatically collected information is personal information under certain laws. This information is automatically collected using cookies, pixels, web beacons, session replay tools, and similar technologies. For more information about our use of cookies and similar technologies, please see the Cookies & Similar Technology section of this Privacy Policy.
  • From External Third-Party Sources . We may collect personal information about you from external third-party sources, such as payment processors, fraud prevention service providers, internet service providers, data analytics providers, advertising networks, social networks, marketing partners, or from public sources (e.g. , your public social media posts), and combine that with Lalechet-collected personal information.

How We Use Personal Information

We use personal information to operate, provide, develop, and improve the Site and our other Offerings, and more generally to operate and improve our business. We may also use personal information about you for any purposes not inconsistent with the statements made in this Privacy Policy, or otherwise made by us in writing at the point of collection, and not prohibited by applicable law, including, without limitation, the following purposes:

  • Provide Our Offerings . We use your personal information to provide and deliver our Offerings and process transactions related to our Offerings, including bookings, registrations, purchases, and payments.
  • Measure, Support & Improve Our Offerings . We use your personal information to measure the use of, analyze the performance of, fix errors in, provide support for, improve, and develop our Offerings.
  • Internal Operations . We use your personal information to perform internal operations, including maintaining and servicing accounts, providing customer service, verifying customer information, and performing similar internal operations relating to our Offerings.
  • Recommendations & Personalization . We use your personal information to recommend our Offerings that might be of interest to you, identify your preferences, and personalize your experience with our Offerings.
  • Communicate With You . We use your personal information to communicate with you in relation to our Offerings through different channels (e.g. , phone, email, chat) and to respond to your requests.
  • Marketing . We use your personal information to market and promote our Offerings.
  • Audit & Monitor Transactions & Engagement . We use your personal information to perform audits and similar monitoring activities, including auditing related to counting ad impressions to unique visitors, verifying the positioning and quality of ad impressions, and auditing compliance.
  • Security & Integrity . We use your personal information to prevent, detect, and respond to fraud, abuse, and misuse of our Offerings and to protect the security and safety of our business, customers, visitors to the Site, and others.
  • Short -Term, Transient Use. We use your personal information for short-term, transient use, including to show you non-personalized advertising as part of your current interactions with our Offerings.
  • Quality Assurance . We use your personal information to perform quality assurance activities, including undertaking activities to verify or maintain the quality and/or safety of our Offerings and to improve, upgrade, and/or enhance our Offerings.
  • Debugging . We use your personal information for debugging to identify and repair errors to our Offerings.
  • Business Analysis . We use your personal information to conduct business analysis activities, including analytics, projections, and identifying areas for operational improvement.
  • Research & Development . We use your information to conduct research and development, including undertaking internal research for technological development and demonstration.
  • Legal Compliance . We use your personal information to fulfill our legal obligations and exercise our legal rights. In some instances, we also have a legal obligation to collect, use, or retain your personal information.
  • Purposes for Which You Consent . We may also ask for your consent to use your personal information for a specific purpose that we communicate with you.

Cookies & Similar Technologies

Scope & Purpose

We, directly or through trusted third parties, use cookies, pixels (including, clear gifs, pixel tags, and single-pixel gifs), web beacons, internet tags, session replay tools, device recognition technologies, in-app tracking methods, device and activity monitoring tools, navigational data collection (log files, server logs, etc.) and other tracking technologies (collectively, “Tracking Technologies ”) for purposes described in this Cookies & Similar Technologies section and elsewhere in this Privacy Policy.

This Cookies & Similar Technologies section is intended to explain and help you understand what Tracking Technologies are, how we use them, and the options you may have to control them. By using any of our Offerings, including the Site, you consent to the Tracking Technologies you may encounter; provided, however, there are certain ways—explained below—in which you may limit Tracking Technologies.

What Are Cookies & Similar Technologies?

Cookies

Cookies are small files created by a web server that can be stored on your computer or device (if you allow) for use either during a particular browsing session (session cookies) or a future browsing session (persistent cookies). They are widely used to make websites and other digital properties work, or work in a better, more efficient way. For example, they can recognize users and remember important information that will make your use of a website more convenient (e.g., by remembering your user preferences).

Session cookies are temporarily stored on your device and remain there until they expire at the end of your browsing session. Persistent cookies remain stored on your device until they expire or are deleted by you. Local shared objects (or flash cookies) are used to collect and store information about your preferences and navigation to, from, and on a website.

First-party cookies are cookies set by the website you are visiting (i.e. , by us when you visit the Site), and they can only be read by that website. Third-party cookies are set by a party other than the website being used by you at the time of access.

Our Offerings, including the Site, may associate some or all of these types of cookies with your devices. To identify certain types of local shared objects on your device and adjust your settings, visit the Flash Player Settings Manager page. For more information on how you can exercise your cookie preferences, please see Your Choices Regarding Cookies & Similar Technologies below.

Tracking Pixels/Web Beacons

Tracking pixels are small graphic images, sometimes known as Internet tags or clear GIFs , that are embedded in webpages and email communications. Tracking pixels may be used, without limitation, to count the number of visitors to the Site, to monitor how users navigate the Site, and to count content and email communication views. In contrast to cookies, which are stored on a user’s computer hard drive, tracking pixels are embedded on web pages. We use tracking pixels to provide analytics information relevant to the user experience, as well as to support the customization of our marketing and advertising activities.

Session Replay

Session replay technologies employ software code to record visitors’ use and interactions with websites and other digital properties, such as how visitors move through different pages on a website and engage with webforms. These interactions include users’ clicks, mobile app touches, mouse movements, and scrolls, keystrokes, and key touches during visitor sessions. Session replay may be used, without limitation, to identify and correct technical issues that visitors may be experiencing on the Site, identify and correct usability problems on the Site, identify broader areas for improvement, and otherwise to generally improve the Site.

In-App Tracking Methods

There are a variety of Tracking Technologies that may be included in mobile applications, which are not browser-based like cookies and cannot be controlled by browser settings. These methods may involve device or other identifiers, such as Ad IDs or SDKs , which associate user app activity to a particular app and track user activity across apps and/or devices. SDKs also help understand how you interact with software applications and collect certain information about the device and network you use to access websites and apps, such as an advertising identifier associated with your device and information about how you interact with an organization’s application.

How We Use Tracking Technologies

Tracking Technologies may be used, for example, to gather information, customize your experience, and enhance the Site and our other Offerings (including through personalized advertisements). For example, we use Tracking Technologies to recognize you as a previous visitor to one or more of our Offerings so that so that we can offer you personalized content. We may use the information gathered through Tracking Technologies to create aggregate tracking information reports regarding user demographics and traffic patterns, among other things. In some cases, we may link tracking information with personal information. We may also use these technologies to help us better manage content, such as improving the interface of our Offerings. For more information on how you can exercise available preferences regarding certain uses, please see below.

Cross-Device Matching

We may use certain technologies, including those that involve the application of statistical probability to data sets, linking a common unique identifier to different device use (e.g. , Facebook ID), or attempting to recognize or make assumptions about users and devices (e.g. , that a user of multiple devices is the same user or household).

We may, now or in the future, use the data collected through Tracking Technologies (directly by us or by our service providers) and other data (i.e. , deterministic data, such as unique identifiers) to make educated predictions that give us the ability to match your devices. We may then, subject to the limitations otherwise set forth in this Privacy Policy and applicable law, display targeted advertisements to you across your devices (unless you have opted-out, as described below).

Interest-Based Advertising

We may use the personal information we collect (alone or in combination with information provided by third parties and service providers) through Tracking Technologies (which may be combined with other personal information, such as your email address), and from other sources, to deliver targeted advertising to you when you visit the Site or our other Offerings. For example, if you are searching the Site for information on a particular service, we may use that information to facilitate the appearance of an advertisement on other websites you view promoting a service that matches your search.

We also partner with third parties that collect personal information across various channels, including online and offline, for purposes of delivering advertising that is more relevant to you. Our partners may place or recognize a Tracking Technology on your computer, device, or directly in our emails or other communications, and that technology may share personal information with them for interest-based advertising purposes. Our partners may use this information to recognize you across different channels and platforms, including but not limited to computers and mobile devices, over time, for purposes of advertising, analytics, attribution, and reporting. We are not responsible for, and make no representations regarding, the policies or business practices of any third parties, including, without limitation, analytics service providers and Tracking Technologies associated with the Site or our other Offerings.

Types of Cookies & Tracking Technologies That We Use

The Site and our other Offerings use cookies and similar technologies to improve functionality, measure and track how you interact with our Offerings, perform analytics, market to you, track ad-driven activity, and otherwise tailor our communications with you. For example:

Google Analytics

We use Google Analytics to collect and process statistical data about the number of people using the Site and to better understand how they find and use the Site. The data collected includes data related to your device/browser, your IP address, and on-site activities to measure and report statistics about user interactions. The information stored is reduced to a random identifier. Any data collected is used in accordance with this Privacy Policy and Google’s privacy policy. You may learn more about Google Analytics by visiting https://www.google.com/policies/privacy/partners/ and https://support.google.com/analytics/answer/6004245.

You can learn more about Google’s restrictions on data use by visiting the Google Privacy Policy at: https://www.google.com/policies/privacy. To opt-out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout and install the opt-out browser add-on feature. For more details, visit the “Google Analytics opt-out browser add-on” page located at https://support.google.com/analytics/answer/181881?hl=en.

Google Tag Manager

We use Google Tag Manager, which allows marketed website tags to be managed using an interface. The tool itself (which implements the tags) does not use cookies and does not register identifiable data. The tool causes other tags to be activated which may, for their part, register personal data under certain circumstances. Google Tag Manager does not access this information. Google Tag Manager is subject to the Google Privacy Policy located at https://www.google.com/intl/en/policies/privacy.

Other Third-Party Technologies

Some third parties may use data collection technologies to collect information about you when you browse the Internet. We do not control these third parties’ technologies or how they may be used. If you have questions about targeted content, you should contact the responsible party directly or consult that party’s privacy policy and/or similar notices/disclosures.

Your Choices Regarding Cookies & Similar Technologies

Most web browsers are set by default to accept cookies. If you do not wish to receive cookies, you may set your browser to refuse all or some types of cookies or to alert you when cookies are being stored. These settings may affect the functionality of the Site. Adjusting your cookie settings may not fully delete all of the cookies that have already been created. To delete them, you should review your web browser settings after you have changed your cookie settings.

Regular cookies may generally be disabled or removed by tools available as part of most commercial browsers, and in some instances blocked in the future, by adjusting your cookie settings. Browsers offer different functionalities and options, so you may need to set them separately. In addition, tools from commercial browsers may not be effective for Flash cookies/locally shared objects, HTML5 cookies, or other Tracking Technologies. For information on disabling Flash cookies, visit Adobe’s Flash Player EOL General Information page.

You may choose to decline or reject Tracking Technologies by adjusting your browser preferences, but doing so may impact your ability to use the Site and access to certain features through the Site. If you delete your cookies, change browsers, or change devices, cookies that the Site may have used in the past (or an opt-out cookie) may no longer work.

Some app-related Tracking Technologies pertaining to non-browser usage (e.g. , most mobile app functionality) can only be disabled by uninstalling the app. Apple and Google mobile devices also have their own settings to limit advertisements and other tracking, but these may not be completely effective.

Your browser settings may allow you to automatically transmit a Do Not Track signal to online services you visit. Note, however, there is no consensus among industry participants as to what “Do Not Track” means in this context. Like many online services, the Site is not impacted when we receive a Do Not Track signal from a visitor’s browser.

The following links provide additional information regarding how to control cookies on popular browsers:

  • Apple Safari
  • Firefox
  • Google Chrome
  • Microsoft Edge

We do not represent that these third-party tools, programs, or statements are complete or accurate. You will need to do this on each browser that you use to access the Site, and cleaning cookies on your browser(s) may disable your preference settings. In addition, please note that the Site may not function properly or as intended if you block all or even certain cookies.

Analytics, Interest-Based Advertising & Tracking Technologies Opt-Out

You may exercise choices regarding certain uses of cookies from Google Analytics by using the Google Analytics Opt-Out Browser Add-On.

As described in this Privacy Policy, and to the extent permitted by law, we may collect (or allow third parties, such as ad networks, web analytics companies, and social networking platforms, to collect) information about your online activities over time and across the Site, and across other third-party online properties or services. These third parties may use information about your visits to the Site and other websites, and general geographic information, in order to provide advertisements about products and services of interest to you, and are treated by us as Third-Party Services under this Privacy Policy. You may choose whether to receive some interest-based advertising by submitting opt-outs. For more information about third-party advertisers and how to prevent them from using your information, please visit the Network Advertising Initiative’s (“NAI ”) Opt-Out of Interest-Based Advertising page, which provides information on how you can opt-out of receiving interest-based advertising from some or all of the NAI’s member organizations. You can also visit the Digital Advertising Alliance’s (“DAA ”) Your Ad Choices page, which provides information on how you can opt-out of receiving interest-based advertising from some or all of the DAA’s participating organizations.

Opting out of interest-based advertising does not mean that you will no longer see any advertisements. Rather, you will still see advertisements that are general and not tailored to your specific interests and activities. Also, if your browser is configured to reject cookies when you visit these opt-out webpages, or you subsequently erase your cookies, use a different device or web browser, or use a non-browser-based method of access (e.g. , a mobile app), your NAI or DAA browser-based opt-out may not, or may no longer, be effective. LP supports the advertising industry’s Self-Regulatory Principles for Online Behavioral Advertising. We expect that ad networks we directly engage to serve you interest-based advertising will do so as well, though we cannot guarantee their compliance. We are not responsible for effectiveness of, or compliance with, any third party’s opt-out options or programs, or the accuracy of their statements regarding their programs.

Device-Based Opt-Out

In general, opt-outs must be performed on each device and browser that you wish to have opted out. For example, if you have opted out of your computer browser, that opt-out will not necessarily be effective on your mobile device. In the event we perform cross-device matching (as described above), once you have opted out on one device (an “Opted-Out Device ”), we will not use any new data from the Opted-Out Device to identify you on another device for interest-based advertising purposes, and we will not use data from another device for interest-based advertising purposes on the Opted-Out Device.

Visual Materials & Consent to Collect, Use & Disclose Video Viewing History

The Site may display live or prerecorded videos or similar audio-visual materials (“Videos ”). We are not in the business of delivering audiovisual materials. Rather, the display and use of Videos on the Site is incidental to our business and merely a peripheral part of our marketing strategy. The provision of Videos on our Site is not an admission by us, and it shall not otherwise be interpreted, in any form or manner, to mean that we are a “video tape service provider” for purposes of the Video Privacy Protection Act (codified as amended at 18 U.S.C. § 2710) (“VPPA ”) or that we are otherwise subject to the VPPA.

We may collect personal information with respect to your viewing, streaming, or otherwise accessing such Videos and we may disclose such personal information regarding your video-viewing history on the Site to third parties through the use of cookies, pixels, or other tracking technologies, such as Facebook, to facilitate or assist with our marketing and advertising campaigns. By viewing, streaming, or otherwise accessing Videos on the Site, you hereby acknowledge, agree, and consent to our collection, use, and disclosure of such personal information regarding your video-viewing history on the Site.

We may use tracking technologies provided by YouTube as part of our services and/or embed YouTube Videos on the Site. These tracking technologies enable us to understand and improve our marketing efforts, track the performance of any Video content we have, and provide you with a more personalized experience. With respect to YouTube Videos embedded on our Site, no data about you will be transferred to YouTube if you do not play the Videos. YouTube may collect information relating to your visit to our Site, including the referring IP address, device, and pages you accessed on our Site. Additional information on the purpose and scope of data collection and processing by YouTube can be found in YouTube’s/Google’s Privacy Policy: https://policies.google.com/privacy?hl=en & gl=de. By viewing any videos embedded on our Site or as part of the products and services that we offer, you consent to the disclosure of information to YouTube through its tracking technologies.

By viewing, streaming, or otherwise accessing Videos on the Site, you hereby acknowledge, agree, and consent to our collection, use, and disclosure of such personal information regarding your video-viewing history on the Site.

Withdrawal of Consent

You acknowledge and agree that you may prevent us from collecting and disclosing personal information from you with respect to your viewing, streaming, or otherwise accessing Videos on the Site: (1) by changing your browser settings in accordance with the instructions set forth in our Privacy Policy; or (2) by adjusting your privacy settings in our cookie management tool. These options will prevent the deployment of cookies and similar online tracking technologies that are used to collect, process, and disclose your personal information in connection with the Videos.

Web Scraping

You are strictly prohibited from using any automated system, software, or other methods, including, without limitation, scripts, bots, crawlers, scrapers, or other data mining tools, to access, acquire, copy, monitor, or collect any data, content, or other information from our Offerings, including the Site, without prior written consent from us. This prohibition extends to the use of any technology designed to bypass or circumvent measures we employ to restrict access to certain content or areas of our Offerings.

How We Share Personal Information

The personal information of our customers, consumers, and others is an important part of our business, and we are not in the business of selling those individuals’ personal information to others. We share personal information with third parties that facilitate the delivery of our Offerings, assist in the operation of our business, and when we are legally required or permitted to do so. In addition, we share personal information when you or other individuals request or require that we share such personal information. We share personal information only as described below and with and with third parties that are either subject to this Privacy Policy or adhere to practices that are at least as protective as those described in this Privacy Policy.

We share the following categories of personal information with third parties:

  • Contact information and other personal identifiers.
  • Business information.
  • Commercial information.
  • Financial information.
  • Internet or other electronic network activity information.
  • Communications and inquiries.
  • Geolocation information.
  • Inferences drawn from other personal information.

We share personal information with the following categories of recipients:

  • Affiliates. We share your personal information with our affiliates that we control, and their respective officers, directors, employees, and agents, that are either subject to this Privacy Policy or adhere to practices that are at least as protective as those described in this Privacy Policy.
  • Third Parties Involved in Your Transactions With Us . We share your personal information to third parties when they are involved in your transactions with us or otherwise through our Offerings, including, without limitation, when we make available services, software, and content provided by such third parties for use on or through our Offerings.
  • Service Providers. We engage other companies and individuals (i.e. , service providers) that provide specific services on our behalf, including data management and analysis, data security, website analytics and improvement, email delivery, and otherwise to help us carry out our business. All service providers are given access to only to the scope of personal information needed to perform their services for us, but are legally or contractually prohibited from using any personal information for their own purposes or for the benefit of any other third party. Further, we require all service providers to process personal information in strict accordance with this Privacy Policy and as further required by applicable law.
  • Business Partners. From time to time, we may share your personal information, including contact information, with business partners that co-sponsor or co-brand activities with us (including to permit them to send you marketing communications), third-party sponsors and related administrators of such activities, and other businesses with which we have a direct commercial relationship. We may also share your personal information with customers and related business partners where such disclosure is appropriate or necessary to enforce or apply our terms or other contractual agreements or to prevent, detect, investigate, and/or address any misuse of our Offerings, exercising and/or establishing our legal rights, and preparing for or pursuing legal claims or other recourse relating to the misuse of our Offerings.
  • Strategic Partners. From time to time, we may share your personal information for strategic partnership purposes, such as with providers of complimentary offerings.
  • Online Advertising Partners. We partner with companies that assist us in advertising our Offerings, including partners that use cookies and similar technologies to collect personal information to personalize, re-target, and measure the effectiveness of advertising. For more information about these practices and how to opt-out of them, please see the Cookies & Similar Technologies section of this Privacy Policy.
  • Professional Advisors. We share personal information with our professional advisors, such as lawyers, accountants, and security and forensics experts, who need access to information to provide services to us or on our behalf.
  • Social Media Platforms. If you interact with us on social media, the platform may be able to collect information about you and your interaction with us. To control this sharing of personal information, please review the privacy policy of the relevant social media platform.
  • Law Enforcement, Government Regulators & Courts. We may disclose personal information to law enforcement, government regulators, other legal or governmental bodies, or courts when we believe such disclosure is necessary to: (1) comply with the law; (2) exercise, establish, or defend legal rights; or (3) protect the vital interests of us, our employees, customers, or other third parties.
  • Third Parties in the Context of Commercial Transactions . We may share personal information with third parties in connection with any proposed, planned, or actual merger, acquisition, investment, financing, reorganization, restructuring, bankruptcy, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business or assets (including, without limitation, for purposes of any due diligence related thereto).
  • Other Third Parties With Your Consent . We may ask if you would like us to share your personal information with unaffiliated third parties not described elsewhere in this Privacy Policy. We will only disclose your personal information in this context with your consent.

We may share with third parties aggregated information and anonymous or de-identified data that does not identify any specific individual, such as groupings of demographic data or user preferences. Except as may be limited by applicable law, we may also share non-personal information for any purpose to any third party.

Retention of Personal Information

We retain your personal information for as long as is necessary to fulfill the purposes for which it was collected, comply with our business requirements and legal obligations, resolve disputes, protect our assets, operate our business, and enforce or apply our terms and other contractual agreements. The period of time for which we retain personal information depends on the purposes for which we collect or use that personal information. For example, we keep your personal information only as long as necessary to provide you with our services and for legitimate and essential business purposes, such as maintaining the performance of our Offerings, making data-driven business decisions about new features and offerings, complying with our legal obligations, and resolving disputes.

We take reasonable steps to delete your personal information we collect when: (1) we have a legal obligation to do so; (2) we no longer have a purpose for retaining the information; or (3) if you ask us to delete your information, unless we determine that doing so would violate our existing, legitimate legal, regulatory, dispute resolution, contractual, or similar obligations. We may also decide to delete your personal information if we believe it is incomplete, inaccurate, or that our continued storage of your personal information is contrary to our legal obligations or business objectives. When we delete personal information, it is be removed from our active servers and databases, but may remain in our archives when it is not practical or possible to delete it.

We may retain and use anonymous, de-identified, or aggregated information for as long as is permitted under applicable law.

Security of Personal Information

We take care to secure and safeguard the personal information entrusted to us. We use a variety of measures to help protect personal information under our control from unauthorized access and use.

We use technical, physical, and administrative safeguards intended to protect the personal information that we collect and process. These safeguards are designed to provide a level of security appropriate to the risk of processing your personal information, and include (as applicable) measures to promote the ongoing confidentiality, integrity, availability, and resilience of our processing systems, and procedures for regularly testing, assessing, and evaluating the effectiveness of those measures.

With that said, no security system is perfect, and no data transmission is 100% secure. Although we strive to protect personal information, we cannot fully eliminate all security risks associated with the processing of your personal information, or guarantee that personal information will remain secure under all circumstances. As such, your use of our Offerings is at your own risk.

If we become aware of a security incident that affects the confidentiality or security of your personal information, we will provide you and any relevant regulator(s) with notice as required by applicable law.

Your Rights & Choices

Email Preferences

We may send you emails about our Site or our other Offerings. If you do not want to continue receiving emails from us, you may opt-out by clicking the “unsubscribe” button at the bottom of our emails or by contacting us using the email address provided in the Contact Us section at the end of this Privacy Policy. Please provide your name and contact information in your request, and we will respond to your request in accordance with applicable law.

Accuracy & Updating Your Personal Information

Our goal is to keep your personal information accurate, current, and complete. If any of the personal information you have provided to us changes, please let us know by using the contact details provided in the Contact Us section at the end of this Privacy Policy. We are not responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal information that you provide to us.

Complaints

If you believe your rights relating to your personal information have been violated, please contact us using the contact details provided in the Contact Us section at the end of this Privacy Policy.

Privacy Rights & Choices for Specific Jurisdictions

You may have certain rights relating to your personal information under local data protection laws. Please read our Additional Jurisdiction-Specific Privacy Notices below for additional information about the processing of your personal information and your rights under applicable jurisdiction-specific laws.

Additional Jurisdiction-Specific Privacy Notices

California Residents

This California Residents section describes our personal data collection and processing practices when we are acting in the role of business (sometimes referred to as a controller or data controller under certain laws) under California law, including the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and its implementing regulations (collectively, the “CCPA ”). We act as the business/controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Collection of Personal Information

Categories of Personal Information Collected

We may collect (and have collected during the preceding 12-month period prior to the Last Updated date of this Privacy Policy) the categories of personal information listed below. Please note, however, that not all categories have/will be collected or received for every individual.

  • Personal identifiers , such as name, postal address, unique personal identifier, online identifier, telephone number, email address, government-issued identifier, and signature.
  • Personal records , such as name, address, telephone number, and financial information. Please note that some personal information included in this category may overlap with other categories.
  • Personal characteristics or traits that constitute characteristics of protected classifications under federal or California law , such as age and gender. We only collect this category of personal information when you choose to provide that information to us, which we will use for our business purposes as that term is used in the CCPA.
  • Commercial information , such as transaction information, records of services purchased, and participation in promotional offers.
  • Internet or other electronic network activity information , such as date and time, IP address or other unique device identifier, access time, cookies, browsing or search history, information about interactions with the Site and/or pages visited, social media information, and location data.
  • Geolocation data ; namely, the physical location from where the Site or our other Offerings were accessed, or from where interaction with the Site or our other Offerings otherwise took place.
  • Inferences drawn from other personal information , such as inferences reflecting individual preferences, interests, or characteristics.
  • Sensitive personal information ; namely, state identification card numbers and driver’s license numbers. We do not, however, sell or share for cross-context behavioral advertising (as those terms are used in the CCPA) any sensitive personal information, and do not use or disclose sensitive personal information for any purposes other than those that are expressly permitted under the CCPA.

We may collect other information that meets the definition of personal information under the CCPA, but which is not reflected by a category above. Under such circumstances, we treat the information as personal information as required by the CCPA, but will not include it when we describe our practices in this Privacy Policy.

As permitted by the CCPA, we do not treat de-identified data or anonymized information as personal information. We reserve the right to convert (or permit others to convert) personal information to de-identified or anonymous form and may elect not to treat publicly available information as personal information. We will not attempt to re-identify data that we maintain as de-identified data.

Sources of Personal Information Collected

We may collect, receive, or combine personal information from different sources, as described in the How We Collect Personal Information section of this Privacy Policy, and as provided below:

  • Provided directly by you or a member of your household.
  • Collected from a device associated with you or your household.
  • Collected from companies that provide services on our behalf.
  • Collected from other external third-party sources.
Purposes for Collection & Use of Personal Information

We may use your personal information for the purposes described in the How We Use Personal Information section of this Privacy Policy, and as provided below:

  • Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.
  • To conduct auditing and monitoring of transactions and engagement, including auditing related to counting ad impressions unique to visitors, verifying positioning and quality of ad impressions, and auditing compliance.
  • Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with the Site.
  • Helping to ensure security and integrity, and to prevent fraud.
  • Undertaking activities to verify or maintain the quality or safety of our Offerings, and to improve, upgrade, or enhance same.
  • Debugging to identify and repair errors.
  • To conduct business analysis activities, including analytics, projections, and identifying areas for operational improvement.
  • To conduct research and development, including undertaking internal research for technological development and demonstration.
  • To provide advertising and marketing services, including targeted advertisements.
  • To fulfill our legal functions or obligations.

Sale/Sharing of Personal Information

As explained in the Cookies & Similar Technologies section of this Privacy Policy, we may share limited information to help ensure you receive useful and relevant ads from us and to measure their effectiveness. We may share personal information with third parties for various purposes, including cross-context behavioral advertising. These kinds of disclosures for cross-context behavioral advertising purposes may be deemed “sharing” personal information as that term is used in the CCPA, and you have the right to opt-out of these disclosures.

We will not, however, share any sensitive personal information for cross-context behavioral advertising purposes (and have not shared any sensitive personal information for such purposes during the preceding 12-month period prior to the Last Updated date of this Privacy Policy).

Nor will we “sell” your personal information or sensitive personal information as that term is used in the CCPA (and have not sold any personal information or sensitive personal information during the preceding 12-month period prior to the Last Updated date of this Privacy Policy).

Categories of Personal Information Shared

We may share for cross-context behavioral advertising purposes (and may have shared during the preceding 12-month period prior to the Last Updated date of this Privacy Policy) the following categories of personal information:

  • Personal identifiers.
  • Personal characteristics or traits that constitute characteristics of protected classifications under California or federal law (namely, demographic information).
  • Internet or other electronic network activity information.
  • Geolocation data (namely, the physical location from where the Site and/or our other Offerings were accessed, or from where interaction with the Site and/or our other Offerings otherwise took place).
  • Inferences drawn from other personal information.
Purposes for Which Personal Information is Shared

We may share your personal information for cross-context behavioral advertising purposes as described in the Cookies & Similar Technologies section of this Privacy Policy, and for the following business purposes:

  • Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.
  • To conduct auditing and monitoring of transactions and engagement, including auditing related to counting ad impressions unique to visitors, verifying positioning and quality of ad impressions, and auditing compliance.
  • Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with the Site.
  • To conduct business analysis activities, including analytics, projections, and identifying areas for operational improvement.
  • To conduct research and development, including undertaking internal research for technological development and demonstration.
  • To provide advertising and marketing services, including targeted advertisements.
Categories of Third Parties to Whom Personal Information is Shared

We may share your personal information for cross-context behavioral advertising purposes (and may have shared during the preceding 12-month period prior to the Last Updated date of this Privacy Policy) with the following categories of third parties:

  • Advertising networks.
  • Data analytics providers.
  • Operating systems and platforms.
  • Social networks.
Consumers Under 16 Years of Age

We do not knowingly sell or share for cross-context behavioral advertising purposes the personal information (or sensitive personal information) of consumers under 16 years of age. For more information about our treatment of children’s personal information, please see the Children’s Online Privacy Protection Act Compliance section of this Privacy Policy.

Disclosures of Personal Information for Business Purposes

Categories of Personal Information Disclosed for Business Purposes

During the preceding 12-month period prior to the Last Updated date of this Privacy Policy, we disclosed the below categories of personal information for a business purpose as that term is used in the CCPA:

  • Personal identifiers.
  • Personal records.
  • Personal characteristics or traits that constitute characteristics of protected classifications under California or federal law (namely, demographic information).
  • Commercial information (namely, financial information and purchase history information).
  • Internet or other electronic network activity information.
  • Geolocation data (namely, the physical location from where the Site and/or our other Offerings were accessed, or from where interaction with the Site and/or our other Offerings otherwise took place).
  • Audio, electronic, visual, thermal, olfactory, or similar information.
  • Inferences drawn from other personal information.
Purposes for Which Personal Information is Disclosed

We may disclose your personal information for the purposes described in the How We Share Personal Information section of this Privacy Policy, and as provided below:

  • Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.
  • To conduct auditing and monitoring of transactions and engagement, including auditing related to counting ad impressions unique to visitors, verifying positioning and quality of ad impressions, and auditing compliance.
  • Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with the Site.
  • Helping to ensure security and integrity, and to prevent fraud.
  • Undertaking activities to verify or maintain the quality or safety of our Offerings, and to improve, upgrade, or enhance same.
  • Debugging to identify and repair errors.
  • To conduct business analysis activities, including analytics, projections, and identifying areas for operational improvement.
  • To conduct research and development, including undertaking internal research for technological development and demonstration.
  • To fulfill our legal functions or obligations.
Categories of Third Parties to Whom Personal Information is Disclosed

We may disclose your personal information with the categories of third-party recipients described in the How We Share Personal Information section of this Privacy Policy.

Use & Disclosure of Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes other than those expressly permitted under the CCPA.

Retention of Personal Information

General information regarding our data retention practices is described in the Retention of Personal Information section of this Privacy Policy.

Your California Privacy Rights

If you are a California resident, you have certain rights relating to your personal information, which are outlined below. Please note that none of these rights are absolute, and are subject to various limitations and exemptions.

  • Right to know categories of personal information. The right to know, up to two times per year, what personal information has been collected about you, including: (1) the categories of personal information collected; (2) the categories of sources from which the personal information was collected; (3) the business or commercial purpose for collecting or sharing personal information; and (4) the categories of third parties to whom personal information was disclosed.
  • Right to know specific pieces of personal information. The right to know, up to two times per year, the specific pieces of personal information collected about you.
  • Right to delete. The right to request that we delete your personal information, subject to certain exceptions.
  • Right to correct. The right to correct inaccurate personal information maintained about you.
  • Right to opt-out. The right to opt-out of the sharing of your personal information for cross-context behavioral advertising purposes.
  • Non-discrimination. The right not to receive discriminatory treatment, or be retaliated against, for your exercise of the privacy rights conferred by the CCPA.

How to Exercise Your California Privacy Rights

Generally

If you are a California resident, you may request to exercise your California privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy. If a request is submitted to us in an incorrect manner or is otherwise deficient, we will either: (1) treat the request as if it had been submitted in a proper and sufficient manner; or (2) provide you with specific directions on how to submit the request or remedy any deficiencies, as applicable.

Verification

If you submit a request to know, delete, or correct, we must verify your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal information—before we can fulfill your request. We do not verify requests to opt-out of the sharing of your personal information unless we suspect fraud. You are not required to create a password-protected account with us to submit or verify a consumer request.

To verify your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address, and/or requesting additional information or documentation solely for the purpose of verifying your identity. Third-party services may assist us with verification to prevent the disclosure of your personal information resulting from fraudulent requests. Although we endeavor to limit the personal information collected in connection with requests to exercise your rights to know, delete, and correct, certain requests may require us to obtain personal information from you. We will review the information provided, and may request additional information from you to ensure we are interacting with the correct individual.

In certain circumstances, we may decline a request to know, delete, or correct, particularly where we are unable to verify your identity. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Verification Processes Specific to Requests to Know, Delete & Correct

We verify each request as follows:

  • Right to know categories of personal information . We verify requests to know categories of personal information to a reasonable degree of certainty, which may include matching at least two data points provided by you with data points maintained by us, which we have determined to be reliable for purposes of verification. If we cannot verify you sufficiently to honor a right to know categories request, we will refer you to this Privacy Policy for a general description of our data practices.
  • Right to know specific pieces of personal information. We verify requests to know specific pieces of personal information to a reasonably high degree of certainty, which may include matching at least three data points provided by you with data points maintained by us, which we have determined to be reliable for purposes of verification. If we cannot verify you sufficiently to honor a right to know specific pieces request, we will treat your request as a right to know categories request.
  • Right to delete. We may verify requests to delete to a reasonable degree of certainty, which may include matching at least two data points provided by you with data points maintained by us, or to a reasonably high degree of certainty, which may include matching at least three data points provided by you with data points maintained by us, depending on the sensitivity of the personal information and the risk of harm to the consumer posed by unauthorized deletion. If we cannot verify you sufficiently to honor a deletion request, you are still permitted to submit a request to opt-out of the sharing of your personal information.
  • Right to correct. We may verify requests to correct to a reasonable degree of certainty, which may include matching at least two data points provided by you with data points maintained by us, or to a reasonably high degree of certainty, which may include matching at least three data points provided by you with data points maintained by us, depending on the sensitivity of the personal information and the risk of harm to the consumer posed by unauthorized correction.
Notice of Right to Opt-Out

As a California resident, you have the right to direct us to stop sharing your personal information with third parties for purposes of cross-context behavioral advertising and to refrain from doing so in the future. Cross-context behavioral advertising allows you to receive tailored advertisements based on personal information gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

You may submit a request to opt-out of the sharing of your personal information using the submission process outlined above, or by clicking the “Do Not Sell or Share My Personal Information” link at the bottom of the Site and selecting your preferences.

You may also exercise your right to opt-out of sharing by setting a browser-level opt-out, the Global Privacy Control (“GPC ”) (referred to as an opt-out preference signal in the CCPA). Your request to opt-out of selling or sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. Because the signal is browser-specific, you will need to broadcast subsequent signals if you are accessing our website through different devices (e.g ., computers, smartphones, tablets). For more information on how to set a preference signal to opt-out of cross-context behavioral advertising, please visit the Global Privacy Control website.

Authorized Agents

You may use an authorized agent to submit a request to know, delete, or correct on your behalf. Authorized agents may submit a request on your behalf by contacting us using the information provided in the Contact Us section of this Privacy Policy.

Please note that an authorized agent must have your signed permission to submit a request on your behalf, or provide proof that they have power of attorney pursuant to California probate law. When submitting requests on behalf of a consumer, authorized agents must include with their submission an executed written authorization indicating that the agent has been authorized to submit the request on behalf of the consumer. Authorized agents that are business entities must be registered with the California Secretary of State to conduct business in California. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your permission and/or to verify your identity.

California Shine the Light

Under California Civil Code § 1798.83 (the “California Shine the Light Law ”), California residents who provide personal information in obtaining products or services for personal, family, or household use may be entitled to request and obtain from us, once per calendar year, information about the personal information we have shared, if any, with other businesses for direct marketing uses. At present, we do not share your personal information with third parties for those third parties’ direct marketing purposes. Please note that not all information sharing is covered by California’s Shine the Light requirements, and only information on covered sharing, if any, will be included in our response.

California Online Privacy Protection Act

As part of the California Online Privacy Protection Act (“CalOPPA ”), all users of the Site and/or the Software may make any changes to their information at any time by contacting us using the email address provided in the Contact Us section at the end of this Privacy Policy.

Colorado Residents

This Colorado Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Colorado Privacy Act (“CPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the CPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy, and, for each category of personal data identified, for the following purposes:

  • Contact information and other personal identifiers. Providing the Site and our other Offerings; performing internal operations; recommendations and personalization; communicating with you; marketing; security and integrity; short-term, transient use; and legal compliance.
  • Business information. Providing the Site and our other Offerings; communicating with you; security and integrity; short-term, transient use; performing quality assurance activities; conducting business analysis activities; and legal compliance.
  • Commercial information. Providing the Site and our other Offerings; recommendations and personalization; communicating with you; security and integrity; short-term, transient use; conducting business analysis activities; and legal compliance.
  • Financial information. Providing the Site and our other Offerings; recommendations and personalization; communicating with you; security and integrity; short-term, transient use; conducting business analysis activities; and legal compliance.
  • Internet or other electronic network activity information. Measuring, supporting, and improving the Site and our other Offerings; performing internal operations; recommendations and personalization; marketing; conducting auditing and monitoring of transactions and engagement; security and integrity; short-term, transient use; and legal compliance.
  • Communications and inquiries. Providing the Site and our other Offerings; recommendations and personalization; communicating with you; conducting monitoring and auditing of transactions and engagement; security and integrity; short-term, transient use; conducting business analysis activities; and legal compliance.
  • Audio and visual information. Providing the Site and our other Offerings; performing internal operations; conducting auditing and monitoring of transactions and engagement; security and integrity; performing quality assurance activities; and legal compliance.
  • Biometric information. Providing the Site and our other Offerings; performing internal operations; conducting auditing and monitoring of transactions and engagement; security and integrity; performing quality assurance activities; and legal compliance.
  • Geolocation information. Providing the Site and our other Offerings; measuring, supporting, and improving the Site and our other Offerings; performing internal operations; conducting auditing and monitoring of transactions and engagement; security and integrity; short-term, transient use; performing quality assurance activities; and legal compliance.
  • Demographic information. Performing internal operations; marketing; conducting auditing and monitoring of transactions and engagement; conducting business analysis activities; and legal compliance.
  • Inferences drawn from other personal data. Providing the Site and our other Offerings; recommendations and personalization; marketing; security and integrity; performing quality assurance activities; conducting business analysis activities; and legal compliance.

Sale/Sharing of Personal Data

Categories & Processing Purposes

We do not sell personal data. We may share the following categories of personal data with third parties for the following specified purposes:

  • Contact information and other personal identifiers. Facilitating services provided by third parties on our behalf; strategic partnerships; communicating with you; marketing; and legal compliance.
  • Business information. Facilitating services provided by third parties on our behalf; payment processing; security and integrity; and legal compliance.
  • Commercial information. Facilitating services provided by third parties on our behalf; strategic partnerships; recommendations and personalization; marketing; security and integrity; short-term, transient use; conducting business analysis activities; and legal compliance.
  • Financial information. Facilitating services provided by third parties on our behalf; payment processing; security and integrity; and legal compliance.
  • Internet or other electronic network activity information. Facilitating services provided by third parties on our behalf; strategic partnerships; recommendations and personalization; conducting auditing and monitoring of transactions and engagement; security and integrity; short-term, transient use; conducting business analysis activities; and legal compliance.
  • Communications and inquiries. Measuring, supporting, and improving the Site and our other Offerings; conducting business analysis activities; and legal compliance.
  • Geolocation information. Measuring, supporting, and improving the Site and our other Offerings; performing internal operations; conducting auditing and monitoring of transactions and engagement; security and integrity; short-term, transient use; and legal compliance.
  • Inferences drawn from other personal data. Marketing; and short-term, transient use.
Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process the following categories of personal data for purposes of targeted advertising as that term is used in the CPA:

  • Contact information and other personal identifiers.
  • Internet or other electronic network activity information.
  • Geolocation information (namely, the physical location from where the Site or our other Offerings were accessed, or from where interaction with the Site or our other Offerings otherwise took place).
  • Demographic information.
  • Inferences drawn from other personal data.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising. To learn more about how you can exercise your Colorado targeted advertising opt-out right, please see How to Exercise Your Colorado Privacy Rights below.

Your Colorado Privacy Rights

If you are a Colorado resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you have certain rights relating to your personal data, which are outlined below. Please note that none of these rights are absolute, and are subject to various limitations and exemptions.

  • Right to access. The right to confirm whether we are processing your personal data and access to your personal data.
  • Right to delete. The right to delete personal data concerning you.
  • Right to correct. The right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes for which we process that personal data.
  • Right to data portability. No more than two times per calendar year, the right to obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity.
  • Right to opt-out of targeted advertising. The right to opt-out of the processing of your personal data for purposes of targeted advertising.
  • Right to revoke consent. The right to revoke your consent given to us for the processing of your personal data.

How to Exercise Your Colorado Privacy Rights

Generally

If you are a Colorado resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Colorado privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a Colorado resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

An authorized agent may submit a request to exercise your right to opt-out of targeted advertising on your behalf. Please note that an authorized agent must have your authority to submit a request to opt-out of targeted advertising on your behalf.

Authentication

If you submit a request to exercise your Colorado privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal data—before we can fulfill your request. You are not required to pay a fee or create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address, and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party services may assist us with authentication to prevent the disclosure of your personal data resulting from fraudulent requests. Although we endeavor to limit the personal data collected in connection with requests to exercise your Colorado privacy rights, this may require us to obtain personal data from you. We will review the information provided, and may request additional information from you to ensure we are interacting with the correct individual.

If you authorize another person to act on your behalf for the purpose of exercising your right to opt-out of targeted advertising, the CPA requires us to authenticate, with commercially reasonable effort, your identity and your authorized agent’s authority to act on your behalf. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your authorization to the agent and/or to verify your identity.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity or the authority of your authorized agent. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Providing & Revoking Your Consent

As a Colorado resident, you have the right to revoke your consent given to us for the processing of your personal data. You may provide your consent, or submit a request to exercise your right to revoke your consent, by contacting us using the information provided in the Contact Us section of this Privacy Policy.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “Colorado Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by Colorado law. In the event that your appeal is denied, you have the ability to file a complaint with the Colorado Attorney General regarding any concerns you may have with the result of your appeal.

No Profiling in Furtherance of Decisions That Produce Legal or Similarly Significant Effects

We do not process personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers as those terms are used in the CPA.

Connecticut Residents

This Connecticut Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Connecticut Data Privacy Act (“CTDPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the CTDPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties are described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the CTDPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your Connecticut targeted advertising opt-out right, please see How to Exercise Your Connecticut Privacy Rights below.

How to Exercise Your Connecticut Privacy Rights

Generally

If you are a Connecticut resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Connecticut privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a Connecticut resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

An authorized agent may submit a request to exercise your right to opt-out of targeted advertising on your behalf. Please note that an authorized agent must have your authority to submit a request to opt-out of targeted advertising on your behalf.

Authentication

If you submit a request to exercise your Connecticut privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal data—before we can fulfill your request. You are not required to create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is the consumer’s second or subsequent request during any 12-month period. We may also charge a reasonable fee to cover our administrative costs in complying with a consumer request if we determine, at our sole discretion, that the nature of a request is manifestly unfounded, excessive, or repetitive.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address, and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party services may assist us with authentication to prevent the disclosure of your personal data resulting from fraudulent requests. Although we endeavor to limit the personal data collected in connection with requests to exercise your Connecticut privacy rights, this may require us to obtain personal data from you. We will review the information provided, and may request additional information from you to ensure we are interacting with the correct individual.

If you authorize another person to act on your behalf for the purpose of exercising your right to opt-out of targeted advertising, the CTDPA also requires us to verify, with commercially reasonable effort, your identity and your authorized agent’s authority to act on your behalf. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your authorization to the agent and/or to verify your identity.

In certain circumstances, we may decline a request, particularly where we are unable to verify your identity or the authority of your authorized agent. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Providing & Revoking Your Consent

As a Connecticut resident, you have the right to revoke your consent given to us for the processing of your personal data. You may provide your consent, or submit a request to exercise your right to revoke your consent, by contacting us using the information provided in the Contact Us section of this Privacy Policy.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “Connecticut Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by Connecticut law. In the event that your appeal is denied, you have the ability to file a complaint with the Connecticut Attorney General regarding any concerns you may have with the result of your appeal. For more information on how you can contact the Connecticut Attorney General to submit a complaint, please see the Connecticut Attorney General’s Complaint webpage.

Delaware Residents

This Delaware Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Delaware Personal Data Privacy Act (“DPDPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the DPDPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the DPDPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your Delaware targeted advertising opt-out right, please see How to Exercise Your Delaware Privacy Rights below.

How to Exercise Your Delaware Privacy Rights

Generally

If you are a Delaware resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Delaware privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a Delaware resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

An authorized agent may submit a request to exercise your right to opt-out of targeted advertising on your behalf. Please note that an authorized agent must have your authority to submit a request to opt-out of targeted advertising on your behalf.

Authentication

If you submit a request to exercise your Delaware privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal information—before we can fulfill your request. You are not required to create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is your second or subsequent request made in the same year. We may also charge a reasonable fee to cover the administrative costs of complying with a request, or decline to act on the request, if we believe, at our sole discretion, that the request is manifestly unfounded, excessive, or repetitive.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party service providers may assist us with authentication to prevent the disclosure of your personal information resulting from fraudulent requests. Although we endeavor to limit the personal information collected in connection with requests to exercise your Delaware privacy rights, this may require us to obtain personal information from you. We will review the information provided and may request additional information from you to ensure we are interacting with the correct individual.

If you authorize another person to act on your behalf for the purpose of exercising your right to opt-out of targeted advertising, the DPDPA also requires us to verify, with commercially reasonable effort, your identity and your authorized agent’s authority to act on your behalf. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your authorization to the agent and/or to verify your identity.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity or if we, at our sole discretion, reasonably believe the request is manifestly unfounded, excessive, or repetitive. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “Delaware Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by Delaware law. In the event your appeal is denied, you have the ability to file a complaint with the Delaware Attorney General regarding any concerns you may have with the result of your appeal. For more information on how you can contact the Delaware Attorney General to submit a complaint, please see the Delaware Attorney General’s Complaint Process webpage.

Iowa Residents

This Iowa Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Iowa Consumer Data Protection Act (“IACDPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the IACDPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the IACDPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising. To learn more about how you can exercise your Iowa targeted advertising opt-out right, please see How to Exercise Your Iowa Privacy Rights below .

How to Exercise Your Iowa Privacy Rights

Generally

If you are an Iowa resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Iowa privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As an Iowa resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

Authentication

If you submit a request to exercise your Iowa privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal information—before we can fulfill your request. You are not required to create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is your third or subsequent request made in the same year. We may also charge a reasonable fee to cover the administrative costs of complying with a request, or decline to act on the request, if we believe, at our sole discretion, that the request is manifestly unfounded, excessive, or repetitive.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party service providers may assist us with authentication to prevent the disclosure of your personal information resulting from fraudulent requests. Although we endeavor to limit the personal information collected in connection with requests to exercise your Iowa privacy rights, this may require us to obtain personal information from you. We will review the information provided and may request additional information from you to ensure we are interacting with the correct individual.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity or if we, at our sole discretion, reasonably believe the request is manifestly unfounded, excessive, or repetitive. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “Iowa Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by Iowa law. In the event your appeal is denied, you have the ability to file a complaint with the Iowa Attorney General regarding any concerns you may have with the result of your appeal. For more information on how you can contact the Iowa Attorney General to submit a complaint, please see the Iowa Attorney General’s File a Consumer Complaint webpage.

Montana Residents

This Montana Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Montana Consumer Data Privacy Act (“MCDPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the MCDPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the MCDPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your Montana targeted advertising opt-out right, please see How to Exercise Your Montana Privacy Rights below.

How to Exercise Your Montana Privacy Rights

Generally

If you are a Montana resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Montana privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a Montana resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

An authorized agent may submit a request to exercise your right to opt-out of targeted advertising on your behalf. Please note that an authorized agent must have your authority to submit a request to opt-out of targeted advertising on your behalf.

Authentication

If you submit a request to exercise your Montana privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal data—before we can fulfill your request. You are not required to create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is the consumer’s second or subsequent request during any 12-month period. We may also charge a reasonable fee to cover our administrative costs in complying with a consumer request if we determine, at our sole discretion, that the nature of a request is manifestly unfounded, excessive, or repetitive.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address, and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party services may assist us with authentication to prevent the disclosure of your personal data resulting from fraudulent requests. Although we endeavor to limit the personal data collected in connection with requests to exercise your Montana privacy rights, this may require us to obtain personal data from you. We will review the information provided, and may request additional information from you to ensure we are interacting with the correct individual.

If you authorize another person to act on your behalf for the purpose of exercising your right to opt-out of targeted advertising, the MCDPA also requires us to verify, with commercially reasonable effort, your identity and your authorized agent’s authority to act on your behalf. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your authorization to the agent and/or to verify your identity.

In certain circumstances, we may decline a request, particularly where we are unable to verify your identity or the authority of your authorized agent. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “Montana Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by Montana law. In the event that your appeal is denied, you have the ability to file a complaint with the Montana Department of Justice regarding any concerns you may have with the result of your appeal.

Nebraska Residents

This Nebraska Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Nebraska Data Privacy Act (“NEDPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the NEDPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the NEDPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your Nebraska targeted advertising opt-out right, please see How to Exercise Your Nebraska Privacy Rights below.

How to Exercise Your Nebraska Privacy Rights

Generally

If you are a Nebraska resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Nebraska privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a Nebraska resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

An authorized agent may submit a request to exercise your right to opt-out of targeted advertising on your behalf. Please note that an authorized agent must have your authority to submit a request to opt-out of targeted advertising on your behalf.

Authentication

If you submit a request to exercise your Nebraska privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal information—before we can fulfill your request. You are not required to create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is your third or subsequent request made in the same year. We may also charge a reasonable fee to cover the administrative costs of complying with a request, or decline to act on the request, if we believe, at our sole discretion, that the request is manifestly unfounded, excessive, or repetitive.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party service providers may assist us with authentication to prevent the disclosure of your personal information resulting from fraudulent requests. Although we endeavor to limit the personal information collected in connection with requests to exercise your Nebraska privacy rights, this may require us to obtain personal information from you. We will review the information provided and may request additional information from you to ensure we are interacting with the correct individual.

If you authorize another person to act on your behalf for the purpose of exercising your right to opt-out of targeted advertising, the NEDPA also requires us to verify, with commercially reasonable effort, your identity and your authorized agent’s authority to act on your behalf. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your authorization to the agent and/or to verify your identity.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity or if we, at our sole discretion, reasonably believe the request is manifestly unfounded, excessive, or repetitive. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

We may also decline an opt-out request submitted by an authorized agent, particularly where we are unable to verify, with commercially reasonable effort, that you a resident of Nebraska; the authorized agent does not communicate the request to us in a clear and unambiguous manner; we do not possess the ability to process the request; or we do not process similar or identical requests we receive from consumers for purposes of complying with similar or identical laws or regulations of another state. If we are unable to comply with a request from an authorized agent in whole or in part, we will notify you with the reasons for the denial.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “Nebraska Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by Delaware law. In the event your appeal is denied, you have the ability to file a complaint with the Nebraska Attorney General regarding any concerns you may have with the result of your appeal. For more information on how you can contact the Nebraska Attorney General to submit a complaint, please see the Nebraska Attorney General’s File a Complaint webpage.

Nevada Residents

Nevada residents have the right to submit a verified request to an operator (as defined by Nevada law) directing the operator not to make any sale (as defined by Nevada law) of any covered information (as defined by Nevada law) that the operator has collected or will collect about the Nevada consumer.

As defined under Nevada law, we do not sell any covered information. Nor do we have any plans to do so in the future. However, Nevada residents may submit a verified request to us at any time using the email address provided in the Contact Us section at the end of this Privacy Policy, directing that we not make any sale of covered information that we have collected or will collect about you. Please provide your name and contact information in your request, and we will respond to your request in accordance with Nevada law.

New Hampshire Residents

This New Hampshire Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the New Hampshire Privacy Act (“NHPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the NHPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the NHPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your New Hampshire targeted advertising opt-out right, please see How to Exercise Your New Hampshire Privacy Rights below.

How to Exercise Your New Hampshire Privacy Rights

Generally

If you are a New Hampshire resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your New Hampshire privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a New Hampshire resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

An authorized agent may submit a request to exercise your right to opt-out of targeted advertising on your behalf. Please note that an authorized agent must have your authority to submit a request to opt-out of targeted advertising on your behalf.

Authentication

If you submit a request to exercise your New Hampshire privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal information—before we can fulfill your request. You are not required to create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is your second or subsequent request made in the same year. We may also charge a reasonable fee to cover the administrative costs of complying with a request, or decline to act on the request, if we believe, at our sole discretion, that the request is manifestly unfounded, excessive, or repetitive.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party service providers may assist us with authentication to prevent the disclosure of your personal information resulting from fraudulent requests. Although we endeavor to limit the personal information collected in connection with requests to exercise your New Hampshire privacy rights, this may require us to obtain personal information from you. We will review the information provided and may request additional information from you to ensure we are interacting with the correct individual.

If you authorize another person to act on your behalf for the purpose of exercising your right to opt-out of targeted advertising, the NHPA also requires us to verify, with commercially reasonable effort, your identity and your authorized agent’s authority to act on your behalf. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your authorization to the agent and/or to verify your identity.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity or if we, at our sole discretion, reasonably believe the request is manifestly unfounded, excessive, or repetitive. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Providing & Revoking Your Consent

As a New Hampshire resident, you have the right to revoke your consent given to us for the processing of your personal data. You may provide your consent, or submit a request to exercise your right to revoke your consent, by contacting us using the information provided in the Contact Us section of this Privacy Policy.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “New Hampshire Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by New Hampshire law. In the event your appeal is denied, you have the ability to file a complaint with the New Hampshire Attorney General regarding any concerns you may have with the result of your appeal. For more information on how you can contact the New Hampshire Attorney General to submit a complaint, please see the New Hampshire Attorney General’s Consumer Complaints webpage.

New Jersey Residents

This New Jersey Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the New Jersey Data Privacy Act (“NJDPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the NJDPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the NJDPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your New Jersey targeted advertising opt-out right, please see How to Exercise Your New Jersey Privacy Rights below.

How to Exercise Your New Jersey Privacy Rights

Generally

If you are a New Jersey resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your New Jersey privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a New Jersey resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

An authorized agent may submit a request to exercise your right to opt-out of targeted advertising on your behalf. Please note that an authorized agent must have your authority to submit a request to opt-out of targeted advertising on your behalf.

Authentication

If you submit a request to exercise your New Jersey privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal information—before we can fulfill your request. You are not required to create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is your second or subsequent request made in the same year. We may also charge a reasonable fee to cover the administrative costs of complying with a request, or decline to act on the request, if we believe, at our sole discretion, that the request is manifestly unfounded, excessive, or repetitive.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party service providers may assist us with authentication to prevent the disclosure of your personal information resulting from fraudulent requests. Although we endeavor to limit the personal information collected in connection with requests to exercise your New Jersey privacy rights, this may require us to obtain personal information from you. We will review the information provided and may request additional information from you to ensure we are interacting with the correct individual.

If you authorize another person to act on your behalf for the purpose of exercising your right to opt-out of targeted advertising, the NJDPA also requires us to verify, with commercially reasonable effort, your identity and your authorized agent’s authority to act on your behalf. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your authorization to the agent and/or to verify your identity.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity or if we, at our sole discretion, reasonably believe the request is manifestly unfounded, excessive, or repetitive. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Providing & Revoking Your Consent

As a New Jersey resident, you have the right to revoke your consent given to us for the processing of your personal data. You may provide your consent, or submit a request to exercise your right to revoke your consent, by contacting us using the information provided in the Contact Us section of this Privacy Policy.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “New Jersey Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by New Jersey law. In the event your appeal is denied, you have the ability to file a complaint with the New Jersey Department of Law and Public Safety, Division of Consumer Affairs regarding any concerns you may have with the result of your appeal. For more information on how you can contact the New Jersey Department of Law and Public Safety, Division of Consumer Affairs to submit a complaint, please see the New Jersey Division of Consumer Affairs’ File a Complaint webpage.

Changes to This Privacy Policy

At our discretion, we may change our Privacy Policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this Privacy Policy, we will post the changes here at the same link by which you are accessing the current version of this Privacy Policy.

If the changes are significant, or if required by applicable law, we will contact you (based on your selected preferences for communications from us) and all our registered users with the new details and links to the updated or changed notice.

Oregon Residents

This Oregon Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Oregon Consumer Privacy Act (“OCPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the OCPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the OCPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your Oregon targeted advertising opt-out right, please see How to Exercise Your Oregon Privacy Rights below.

Your Oregon Privacy Rights

If you are an Oregon resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you have certain rights relating to your personal data, which are outlined below. Please note that none of these rights are absolute, and are subject to various limitations and exemptions.

  • Right to access . The right to request confirmation whether your personal data is or has been processed, the categories of your personal data that are or have been processed, and a copy of your personal data that is or has been processed.
  • Right to delete. The right to request deletion of your personal data.
  • Right to correct. The right to correct inaccuracies in personal data maintained about you, subject to certain exceptions.
  • Right to data portability. The right to obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity.
  • Right to opt-out of targeted advertising. The right to opt-out of the processing of your personal data for purposes of targeted advertising.
  • Right to revoke consent. The right to revoke your consent given to us for the processing of your personal data.

How to Exercise Your Oregon Privacy Rights

Generally

If you are an Oregon resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Oregon privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As an Oregon resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

An authorized agent may submit a request to exercise your right to opt-out of targeted advertising on your behalf. Please note that an authorized agent must have your authority to submit a request to opt-out of targeted advertising on your behalf.

Authentication

If you submit a request to exercise your Oregon privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal data—before we can fulfill your request. You are not required to create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is the consumer’s second or subsequent request made in the same year, unless the purpose of the second or subsequent request is to verify that we have corrected inaccuracies in, or have deleted, your personal data in compliance with your request.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address, and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party services may assist us with authentication to prevent the disclosure of your personal data resulting from fraudulent requests. Although we endeavor to limit the personal data collected in connection with requests to exercise your Oregon privacy rights, this may require us to obtain personal data from you. We will review the information provided, and may request additional information from you to ensure we are interacting with the correct individual.

If you authorize another person to act on your behalf for the purpose of exercising your right to opt-out of targeted advertising, the OCPA requires us to verify, with commercially reasonable effort, your identity and your authorized agent’s authority to act on your behalf. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your authorization to the agent and/or to verify your identity.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity after notifying you that we cannot, using commercially reasonable methods, authenticate your request without additional information from you. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Providing & Revoking Your Consent

As an Oregon resident, you have the right to revoke your consent given to us for the processing of your personal data. You may provide your consent, or submit a request to exercise your right to revoke your consent, by contacting us using the information provided in the Contact Us section of this Privacy Policy.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “Oregon Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by Oregon law. In the event that your appeal is denied, you have the ability to file a Complaint with the Oregon Attorney General regarding any concerns you may have with the result of your appeal. For more information on how you can contact the Oregon Attorney General to submit a complaint, please see the Oregon Attorney General’s Privacy Law FAQs for Consumers webpage.

No Profiling in Furtherance of Decisions That Produce Legal Effects or Effects of Similar Significance

We do not process personal data for purposes of profiling in furtherance of decisions that produce legal effects or effects of similar significance, and will not do so in the future without providing you with notice and an opportunity to opt-out in accordance with the OCPA.

Texas Residents

This Texas Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Texas Data Privacy & Security Act (“TDPSA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the TDPSA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the TDPSA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your Texas targeted advertising opt-out right, please see How to Exercise Your Texas Privacy Rights below.

How to Exercise Your Texas Privacy Rights

Generally

If you are a Texas resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Texas privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a Texas resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

An authorized agent may submit a request to exercise your right to opt-out of targeted advertising on your behalf. Please note that an authorized agent must have your authority to submit a request to opt-out of targeted advertising on your behalf.

Authentication

If you submit a request to exercise your Texas privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal data—before we can fulfill your request. You are not required to create a password-protected account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is the consumer’s third or subsequent request made in the same year. We may also charge a reasonable fee to cover the administrative costs of complying with a request, or decline to act on the request, if we believe, at our sole discretion, that the request is manifestly unfounded, excessive, or repetitive.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party services may assist us with authentication to prevent the disclosure of your personal data resulting from fraudulent requests. Although we endeavor to limit the personal data collected in connection with requests to exercise your Texas privacy rights, this may require us to obtain personal data from you. We will review the information provided, and may request additional information from you to ensure we are interacting with the correct individual.

If you authorize another person to act on your behalf for the purpose of exercising your right to opt-out of targeted advertising, the TDPSA also requires us to verify, with commercially reasonable effort, your identity and your authorized agent’s authority to act on your behalf. Before fulfilling a request from an authorized agent, we may contact you directly to confirm that you have given your authorization to the agent and/or to verify your identity.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity or if we, at our sole discretion, reasonably believe the request is manifestly unfounded, excessive, or repetitive. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “Texas Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by Texas law. In the event your appeal is denied, you have the ability to file a complaint with the Texas Attorney General regarding any concerns you may have with the result of your appeal. For more information on how you can contact the Texas Attorney General to submit a complaint, please see the Texas Attorney General’s File a Consumer Complaint webpage.

Utah Residents

This Utah Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Utah Consumer Privacy Act (“UCPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the UCPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the UCPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your Utah targeted advertising opt-out right, please see How to Exercise Your Utah Privacy Rights below.

How to Exercise Your Utah Privacy Rights

Generally

If you are a Utah resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Utah privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a Utah resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

Authentication

If you submit a request to exercise your Utah privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal data—before we can fulfill your request. We may charge a fee for information in response to a request if the request is the consumer’s second or subsequent request during the same 12-month period. We may also charge a reasonable fee to cover the administrative costs of complying with a request, or refuse to act on a request, if the request is excessive, repetitive, technically infeasible, or manifestly unfounded; we reasonably believe, at our sole discretion, that the primary purpose in submitting the request is something other than exercising a right; or the request, individually or as part of an organized effort, harasses, disrupts, or imposes undue burden on the resources of our business.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address, and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party services may assist us with authentication to prevent the disclosure of your personal data resulting from fraudulent requests. Although we endeavor to limit the personal data collected in connection with requests to exercise your Utah privacy rights, this may require us to obtain personal data from you. We will review the information provided, and may request additional information from you to ensure we are interacting with the correct individual.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity, or if we, at our sole discretion, reasonably suspect the request to be fraudulent. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Virginia Residents

This Virginia Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) as that term is used in the Virginia Consumer Data Protection Act (“VCDPA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Personal Data Collection & Processing

Categories of Personal Data

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy. We do not currently process sensitive data as that term is used in the VCDPA, and will not do so without your consent.

Processing Purposes

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Sharing of Personal Data

Categories of Personal Data

We do not sell personal data. The categories of personal data that we may share with third parties is described in the How We Share Personal Information section of this Privacy Policy.

Third-Party Recipients

The categories of third parties with whom we may share personal data are described in the How We Share Personal Information section of this Privacy Policy.

Targeted Advertising

We process personal data for purposes of targeted advertising as that term is used in the VCDPA.

You have the right to opt-out of the processing of personal data for purposes of targeted advertising.To learn more about how you can exercise your Virginia targeted advertising opt-out right, please see How to Exercise Your Virginia Privacy Rights below.

How to Exercise Your Virginia Privacy Rights

Generally

If you are a Virginia resident that interacts with us in an individual or household capacity (and not in a commercial or employment context), you may request to exercise your Virginia privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a Virginia resident, you have the right to direct us to stop processing your personal data for purposes of targeted advertising. Targeted advertising allows you to receive tailored advertisements based on personal data gathered from activity over time and across non-affiliated properties. Opting out does not, however, mean that you will no longer see advertisements from us, or that your experience when using the Site will not be personalized based on your activity on the Site. Rather, the advertisements you see will no longer be tailored to you based on the combination of your activity on the Site and your activity on non-affiliated websites, applications, and online services.

Authentication

If you submit a request to exercise your Virginia privacy rights, we must authenticate your identity—typically through your submission of sufficient information for us to reasonably verify you are the consumer about whom we have collected personal data—before we can fulfill your request. You are not required to create an account with us to submit or authenticate a consumer request, but we may require you to use an existing account. We may charge a fee for information provided in response to a request if the request is the consumer’s third or subsequent request made in the same year. We may also charge a reasonable fee to cover the administrative costs of complying with a request, or decline to act on the request, if we believe, at our sole discretion, that the request is manifestly unfounded, excessive, or repetitive.

To authenticate your identity, we generally require the matching of sufficient information you provide to us with your request to the information we maintain about you in our systems. This may involve sending you a link to verify your email address, and/or requesting additional information or documentation solely for the purpose of authenticating your identity. Third-party services may assist us with authentication to prevent the disclosure of your personal data resulting from fraudulent requests. Although we endeavor to limit the personal data collected in connection with requests to exercise your Virginia privacy rights, this may require us to obtain personal data from you. We will review the information provided, and may request additional information from you to ensure we are interacting with the correct individual.

In certain circumstances, we may decline a request, particularly where we are unable to authenticate your identity or if we, at our sole discretion, reasonably believe the request is manifestly unfounded, excessive, or repetitive. If we are unable to comply with your request in whole or in part, we will notify you with the reasons for the denial.

Appeals

If your request is denied, you may appeal our decision by contacting us using the contact details in the Contact Us section of this Privacy Policy, with the subject line “Virginia Resident: Appeal of Request Denial,” and attaching both the communication from us explaining why we were unable to fulfill your request, as well as your response to the reasons stated for our denial in the original communication. We will respond to your appeal within the time required by Virginia law. In the event that your appeal is denied, you have the ability to file a complaint with the Virginia Attorney General regarding any concerns you may have with the result of your appeal. For more information on how you can contact the Virginia Attorney General to submit a complaint, please see the Virginia Attorney General’s File a Complaint webpage.

Australia Residents

Australia residents, under the Privacy Act 1988 (“Privacy Act ”) and the Australia Privacy Principles (“APPs ”), have the right to request the individual information that we have collected about you, correct factual inaccuracies in your information, remove personal information from our databases, and/or update your personal information. If you are a resident of Australia, you may request to exercise your Australia privacy rights by contacting us using the information provided in the Contact Us section at the end of this Privacy Policy.

Brazil Residents

This Brazil Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) under Brazilian law, including the Lei Geral de Protecao de Dados Pessoais (“LGPD ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Our contact details are provided in the Contact Us section at the end of this Privacy Policy.

Legal Basis for Processing Personal Data

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy, based on one or more of the following legal grounds:

  • Consent. With your consent as the data subject.
  • Contract. As necessary for the execution of a contract or preliminary procedures related to a contract to which you, as the data subject, are a party, at your request.
  • Legal Obligations. As necessary to comply with our legal or regulatory obligations, as well as to keep records of our compliance processes.
  • Legal Rights. As necessary for us to exercise our legal rights in judicial, administrative, or arbitration proceedings.
  • Vital Interests. As necessary to protect your life or physical safety, or the life or physical safety of other third parties.
  • Legitimate Interests. As necessary to fulfill our legitimate interests or those of third parties (except when the fundamental rights and liberties of data subjects which require the protection of personal data prevail).

How to Exercise Your Brazil Privacy Rights

If you are a resident of Brazil, you may request to exercise your Brazil privacy rights by contacting us using the information provided in the Contact Us section of this Privacy Policy.

As a resident of Brazil, you have the right to object to our use of your personal data. If you no longer agree with us processing any types or categories of your personal data, you can contact us using the information provided in the Contact Us section of this Privacy Policy.

Complaints

As a resident of Brazil, you have the right to file a complaint concerning our processing of your personal data with the Autoridade Nacional de Protecao de Dados (“ANPD ”).

Canada Residents

This Canada Residents section describes our personal data collection and processing practices when we are acting in the role of controller (sometimes referred to as a data controller or business under certain laws) under Canadian law, including the Personal Information Protection and Electronic Documents Act (“PIPEDA ”). We act as the controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

Our contact details are provided in the Contact Us section at the end of this Privacy Policy.

How to Exercise Your Canadia Privacy Rights

If you are a resident of Canada, you may request to exercise your Canada privacy rights, including your rights of access and correction/rectification, by contacting us using the information provided in the Contact Us section of this Privacy Policy.

Depending on your province, you may have additional rights, including the right to control the dissemination of your personal data, the right to data portability, the right to be informed of and submit observations regarding automated decisionmaking, and the right to request information about our data processing practices.

If you no longer agree with us processing any categories or types of your personal data, you can contact us using the information provided in the Contact Us section of this Privacy Policy.

Children

As stated in the Children’s Online Privacy Protection Act Compliance section of this Privacy Policy, neither the Site nor any of our other Offerings are directed to children under the age of 13, and we do not knowingly collect or solicit personal data from children under the age of 13 (or such greater age required in your province for you to be authorized to use our Offerings without parental approval). For more information about our treatment of children’s personal data, please see the Children’s Online Privacy Protection Act Compliance section of this Privacy Policy.

International Data Transfers

As explained in the Transfer of Personal Information Outside Your Home Country section of this Privacy Policy, we and certain third-party service providers that perform functions on our behalf may collect, process, transfer, and store your personal data in the United States and other jurisdictions outside of where you live. When we share personal data outside of your jurisdiction of residence, we ensure that such transfers comply with your local law so that your personal data is adequately protected. While such personal data is outside of your jurisdiction of residence, it is subject to the laws of the jurisdiction in which it is held, and may be subject to disclosure to the governments, courts, or law enforcement or regulatory agencies of such other jurisdictions, pursuant to applicable law.

Cookies & Similar Technologies

As described in the Cookies & Similar Technologies section of this Privacy Policy, we may use cookies and similar technologies to collect information about your activity, browser, or device. To learn more about how we and our partners use cookies and similar technologies and your choices, please see the Cookies and Similar Technologies section of this Privacy Policy.

Complaints

As a resident of Canada, you have the right to file a complaint concerning our processing of your personal data with the Office of the Privacy Commissioner of Canada or your local privacy commissioner.

EEA, UK & Swiss Residents

This EEA, UK & Swiss Residents section describes our personal data collection and processing practices when we are acting in the role of data controller (sometimes referred to as a controller or business under certain laws) in connection with natural persons located in the European Economic Area (“EEA ”), United Kingdom (“UK ”), and Switzerland. We act as the data controller for personal data collected, received, or processed in connection with the Site and our other Offerings.

The processing of personal data of natural persons located in the EEA is governed by the European Union General Data Protection Regulation 2016/679 (“EU GDPR ”). The processing of personal data of natural persons located in the UK is governed by the Data Protection Act 2018 (“DPA 2018 ”), which incorporates the GDPR into UK law (“UK GDPR ”). The processing of personal data of natural persons located in Switzerland is governed by the new Federal Act on Data Protection (“nFADP ”). This EEA, UK & Swiss Residents section refers to the EU GDPR, UK GDPR, and nFADP collectively as the “GDPR .”

Our contact details are provided in the Contact Us section at the end of this Privacy Policy.

Categories of Personal Data Processed

The categories of personal data that we collect and process are described in the Personal Information We Collect About You section of this Privacy Policy.

Purposes For Processing Personal Data

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy.

Legal Basis for Processing Personal Data

We may use your personal data for the purposes described in the How We Use Personal Information section of this Privacy Policy, based on one or more of the following legal grounds:

  • Legal Obligations . As necessary to comply with our legal obligations (namely, to provide customers with our products and services purchased pursuant to a legally binding contract between us and the customer), as well as to keep records of our compliance processes (for example, to comply with applicable accounting rules and to make mandatory disclosures to law enforcement).
  • Vital Interests . As necessary to protect your vital interests or the vital interests of other natural persons.
  • Consent . Where you have expressly given us your consent to process your personal data, such as consent for the purpose of authenticating your identity and verifying that you are present and alive when you enroll or log in.

Recipients of Personal Data

We use various service providers to manage and otherwise operate the Site and our other Offerings. Our service providers change from time to time. Please note that we require all service providers to enter into contracts with us that restrict what they can do with your personal data. If you would like specific information about our service providers who have received your personal data, please contact us by using the contact details provided in the Contact Us section of this Privacy Policy, and we will provide that information to you. We may also disclose your personal data to other categories of third parties as described in this Privacy Policy.

Retention of Personal Data

Information regarding our data retention practices is described in the Retention of Personal Information section of this Privacy Policy. Please note that our data retention practices do not affect your right to request that we delete your personal data before the end of its designated retention period.

Transfers of Personal Data to Third Countries

As explained in the Transfer of Personal Information Outside Your Home Country section of this Privacy Policy, our operations are based in the United States, and that is where we process personal data collected by us where we are a data controller. When you provide personal data to us, we request your consent to transfer that personal data to the United States. The United States does not have an adequacy decision from the European Commission (“EC ”), which means that the EC has not determined that the laws of the United States provide adequate protection for personal data. Although the laws of the United States have been deemed not to provide legal protection that is equivalent to EU, UK, or Swiss data protection laws, we safeguard your personal data by treating it in accordance with this Privacy Policy. We take appropriate steps to protect your privacy and implement reasonable security measures to protect your personal data in storage. We use secure transmission methods to collect personal data through the Site and our other Offerings where we are a data controller. We also enter into contracts with our data processors (i.e. , our service providers) that require them to treat personal data in a manner that is consistent with this Privacy Policy.

For more information regarding our data security practices, please see the Security of Personal Information section of this Privacy Policy.

Your GDPR Rights

If you are a natural person located in the EEA, UK, or Switzerland, you have certain rights relating to the personal data we collect about you, which are outlined below. Please note that none of these rights are absolute, and are subject to various limitations and exceptions. You can exercise these rights at any time by submitting a written request to the mailing address provided in the Contact Us section of this Privacy Policy, with “Attn: GDPR Data Subject Rights Request,” and we will fulfill requests to the extent required by applicable law.

  • Access . The right to receive confirmation regarding whether personal data about you is being processed and, if so, access to your personal data and certain additional information regarding our processing activities.
  • Rectification . The right to correct inaccurate personal data about you.
  • Erasure . The right to request that we delete your personal data under certain circumstances.
  • Restrict processing . The right to limit our processing of your personal data under certain circumstances.
  • Data portability . The right to have your personal data in our possession made available in a portable format so that you can transfer that personal data to a third party.
  • Object . The right to object to the processing of your personal data under certain circumstances.
  • Withdraw consent . The right to fully or partially withdraw consent that you have previously given us for the collection, processing, and transfer of your personal data.
  • Lodge a complaint with a supervisory authority . The right to file a complaint concerning our processing of your personal data with your national or regional data protection supervisory authority regarding any alleged infringement of applicable data protection law. The EC maintains a list of applicable data protection authorities, which is accessible by clicking here. The applicable data protection authority in the UK is the Information Commissioner's Office (“ICO ”), and the applicable data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (“FDPIC ”).

No Statutory or Contractual Requirement, or Other Obligation, to Provide Personal Data

You are under no statutory or contractual requirement, or other obligation, to provide personal data to us. However, it will not be possible to receive communications from us or for you to utilize other features or offerings provided by us without doing so.

No Automated Decisionmaking or Profiling

We do not engage in any processing of personal data that may be considered to involve automated decisionmaking or profiling as those terms are used in the GDPR.

Third-Party Services

We strive to continuously improve your experience when using our Offerings. We may provide you with references or links to third-party websites, online services, or mobile applications that are not affiliated with us, and which may link to other websites, services, or applications (“Third-Party Services ”). We do not own or control these Third-Party Services, and are not responsible for the privacy or data practices of the websites and third parties that have ownership or control over them. These Third-Party Services operate independently from us, which means that their privacy practices are not covered by this Privacy Policy. We do not make any guarantee regarding any Third-Party Services, and we are not liable for any loss or damage caused by using such Third-Party Services. Any data collected by Third-Party Services is not covered by this Privacy Policy. You should review the policies of these Third-Party Services to learn more about their privacy practices, including details regarding the personal information they may collect about you, and should contact these Third-Party Services directly if you have any questions about their data practices.

Transfer of Personal Information Outside Your Home Country

We are located in the United States. The personal information that we (and our service providers) collect and process is governed by United States law. If you access our Offerings, including the Site, from outside the United States, please be aware that personal information collected through the Site may be transmitted to, processed, stored, and used in the United States, or to other countries or places in which we do business. Data protection laws in those jurisdictions may be different from those of your country of residence. Your use of our Offerings, or the provision of any personal information, constitutes your consent to the transfer, processing, use, sharing, and storage of your personal information to the United States or elsewhere, as set forth in this Privacy Policy.

When we engage in cross-border data transfers, we take measures to make sure such transfers comply with this Privacy Policy and relevant data protection laws. This includes, but is not limited to, various safeguards for these transfers, including formal data protection contracts or standard contractual clauses, technical measures (e.g. , encryption, etc.), and procedures to resist unlawful or excessive requests from governmental authorities.

Children’s Online Privacy Protection Act Compliance

The Children’s Online Privacy Protection Act (“COPPA ”), as well as other data protection laws, restrict the collection, use, and disclosure of personal information from and about children on the Internet. Our Offerings, including the Site, are not directed to children under the age of 13, and we do not knowingly collect or solicit personal information from children under the age of 13. If we become aware that we have inadvertently received or collected personal information from a child who is under the age of 13 without parental or legal guardian consent, we will take steps to stop collecting that information and delete it from our files and records. If you believe we have received any information from a child under the age of 13, please let us know by using the contact details provided in the Contact Us section at the end of this Privacy Policy.

For more information regarding COPPA, please visit the Federal Trade Commission’s COPPA website.

By using our Offerings, including the Site, you represent that you are at least 18 years old. If you are under 18, you are strictly prohibited from accessing or using the Site or our other Offerings.

Updates & Changes to This Privacy Policy

As our business continues to evolve, our policies are reviewed periodically and may be revised from time to time. We may change this Privacy Policy at and time, and will notify you by posting an updated version of the Privacy Policy on this page. We may also, at our discretion, notify you of changes to this Privacy Policy via email.

You are expected to, and you acknowledge and agree that it is your responsibility to, carefully review this Privacy Policy prior to using the Site, and thereafter from time to time, so that you are aware of any revisions or updates and its current terms, including what personal information we collect, how we use it, and under what circumstances we might disclose it. Your continued use of the Site after the Last Updated date indicated at the top of this Privacy Policy will constitute your agreement to, and acceptance of, any changes to our Policy, and to our collection and sharing of your personal information according to the then-current version of the Policy. If you do not agree with this Privacy Policy and our practices, you may not access or use the Site or our other Offerings.

Contact Us

For more information, if you have any questions about this Privacy Policy, or if you wish to exercise your privacy rights or submit a complaint, you may contact us using the information below:

Mail: Lalechet Tours

Attn: Legal Department

1413 38th Street

Brooklyn, New York 11218

Email: info@lalechet.com

Telephone: 718.215.1566