Skip to main content

State Specific Consumer Data Privacy Law Disclosures

StateConsumer Privacy RightsProcess for Exercising Rights
CaliforniaThe right to know, by way of our Policy and any specific inquiries you direct to us, where Personal Information we have about you comes from, what we use that information for, whether it is being disclosed or sold, and to whom it is being disclosed or sold;The right to have access to any Personal Information we have in our possession or control regarding you; The right to “opt-out” of our sale or sharing of your Personal Information to any third parties and to “opt-out” of any automated decision making or profiling;The right, with some exceptions, to have your Personal Information deleted from our possession or control; The right to receive equal service and pricing from us even if you exercise any of your privacy rightsThe right to correct inaccurate personal information;The right to receive your Personal Information to allow it to be moved to other companies; andThe right to restrict the processing of sensitive Personal Information.California law permits users of the Site who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. A California resident may also use an authorized agent to submit a right to access request or a request to delete. To make such a request, to learn more, or if you have any questions or concerns about your California privacy rights, please visit the Privacy Notice for California Residents.
VirginiaTo confirm whether or not we are processing your Personal Information and to access such Personal Information;To correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information;To delete your Personal Information;To obtain a copy of your Personal Information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the Information to another controller without hindrance, where the processing is carried out by automated means; andTo opt-out of the Personal Information processing for purposes of targeted advertising, the sale of personal Information, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.We will respond to any of the above requests within forty-five days. We may extend this deadline once by an additional forty-five days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five-day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][email address—ideally specific to this state]
If we declines to take action regarding your request, we shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen days of receipt of our initial response to the following:
[email address—ideally specific to this state’s appeal] 
Within sixty days of receipt of your appeal, we shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions. If unsatisfied, you may file a complaint with the Virginia Attorney General at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint
ColoradoTo opt-out of the processing of your Personal Information for purposes of targeted advertising, the sale of Personal Information; or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;To confirm whether we are processing your Personal Information and to receive access to that Personal Information;To correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of your Information;To delete your Personal Information; andWhen exercising your right to access your Personal Information, to obtain the Personal Information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. We will respond to any of the above requests within forty-five days. We may extend this deadline once by an additional forty-five days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five-day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][email address—ideally state specific]
If we declines to take action regarding your request, we shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen days of receipt of our initial response to the following:
[state specific appeal email] 
Within forty-five days of receipt of your appeal, we shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions. We may extend this period by sixty days where reasonably necessary, considering the complexity and number of requests serving as the basis for the appeal. If unsatisfied, you may file a complaint with the Colorado Attorney General at https://coag.gov/file-complaint/.
UtahTo confirm if we are processing your Personal Information and to access that data;2) To delete Personal Information that you provided to us;3) If technically feasible, to obtain a copy of data that you provided to us in a portable manner; and4) To opt out of the processing of Personal Information for targeted advertising or sale. We will respond to authenticated requests seeking any of the above requests within forty-five days. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address]
ConnecticutTo know what Personal Information we have collected about you, so long as revealing such information would not reveal a trade secret;2) To obtain, where technically feasible, a copy of all the Personal Information that we have acquired about you;3) To correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of your Information;4) To delete your Personal Information; and5) To opt out of the processing of your data for the purposes of: a) targeted advertising, b) the sale of Personal Information, or c) profiling in furtherance of solely automated decisions that produce legal or similar significant effects on you. We will respond to authenticated requests seeking any of the above requests within forty-five days. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address]
Iowa (1/1/2025)The right to confirm whether we are processing your Personal Information and to access that data;The right to delete the Personal Information that you provide to us;The right to obtain a copy of the Personal Information that you provide to us in a portable readily usable format; andThe right to opt out of the sale of your Personal Information.We will respond to authenticated requests seeking any of the above requests within ninety (90) days, unless extended, for good cause, by another forty-five (45) days. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address]
Indiana (1/1/2026)The right to confirm whether we are processing your Personal Information and request access to the same;The right to correct inaccuracies in the Personal Information you provided to us;The right to obtain a copy, or representative summary, of the Personal Information about you possessed by us in a portable and readily usable format;The right to delete the Personal Information that you provided to us and/or data otherwise obtained about you by us; The right to opt out of the processing of your Personal Information for targeted advertising, profiling, and of the selling of your Personal Information; andThe right, as a parent or on behalf of a user known to be a child, to prevent the processing of sensitive data (as that term is defined by statute) about that child unless and until that parent or person on their behalf provides consent.We will respond to authenticated requests seeking any of the above requests within forty-five (45) days, unless extended for cause, by another forty-five (45) days. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address] 
MontanaThe right to opt-out of the sale by us of Personal Information and the use of Personal Information for targeted marketing and profiling;The right to delete the Personal Information that you provided to us and/or data otherwise about you; The right to confirm whether we are processing your Personal Information and request access to the same;The right to correct inaccuracies in the Personal Information you provided to us;The right to obtain a copy, or representative summary, of the Personal Information about you possessed by us in a portable and readily usable format;The right, as a parent or on behalf of a user known to be a child, to prevent the processing of sensitive data about that child unless and until that parent or person on their behalf provides consent;The right to appeal any decision by us not to provide information or take action pursuant to these rights.We will respond to any of the above requests within forty-five days. We may extend this deadline once by an additional forty-five days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five-day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address]
If we declines to take action regarding your request, we shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen days of receipt of our initial response to the following:
[state specific appeal email address]
We shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions. 
TennesseeThe right to confirm whether we are processing their personal data and request access to the same;The right to delete the personal data that you provided to us and/or that we have obtained about you; The right to obtain a copy, or representative summary, of the personal data about you possessed by us in a portable and readily usable format;The right to correct inaccuracies in the personal data you provided to us;The right to opt-out of the sale by us of personal information and the use of personal information for targeted marketing and profiling; andThe right to appeal any decision by us not to provide information or take action pursuant to these rights.We will respond to any of the above requests within forty-five days. We may extend this deadline once by an additional forty-five days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five-day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address]
If we declines to take action regarding your request, we shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen days of receipt of our initial response to the following:
[state specific appeal email address]
We shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions. 
TexasThe right to have confirmed that an entity is processing the resident’s Personal Information and to access that personal data;The right to correct inaccuracies in the resident’s personal data, taking into account the nature of the Personal Information and the purposes of the processing of the resident’s Personal Information;The right to delete Personal Information provided by or obtained about the resident; The right, if available in a digital format, to obtain a copy of the resident’s Personal Information that the resident previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another entity without hindrance; andThe right to opt out of the process of their Personal Information for the purposes of:Targeted advertising;The sale of Personal Information; orProfiling in furtherance of a decision that produces a legal or similarly significant effect concerning the resident.We will respond to any of the above requests within forty-five days. We may extend this deadline once by an additional forty-five days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five-day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address]
If we decline to take action regarding your request, we shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen (14) days of receipt of our initial response to the following:
[state specific appeal email address]
We shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions within sixty (60) days of receipt of your appeal. If unsatisfied, you may file a complaint with the Texas Attorney General at File a Consumer Complaint | Office of the Attorney General (texasattorneygeneral.gov).
Florida (7/1/2024) 
Very narrow scope of applicability:Conducts business within the state of FL;Collects personal data from consumers; Determines purposes or means of processing;Has a global annual revenue of $1B; and Derive 50 percent of its global gross annual revenue from the sale of advertisements online; Operate a consumer smart speaker and voice command service with an integrated virtual assistant connected to a cloud computing service that uses hands-free verbal activation; orOperate an app store or digital distribution platform with at least 250,000 different software applications for consumers to download and install.
The right to confirm whether we are processing their personal information and to access that personal data;The right to correct inaccuracies in the their personal data, taking into account the nature of the Personal Information and the purposes of the processing of the their personal information;The right to delete personal information provided by or obtained about them; The right, if available in a digital format, to obtain a copy of the personal data about them possessed by us in a portable and readily usable format;The right to opt out of the processing of their personal information for the purposes of:Targeted advertising;The sale of personal information; orProfiling in furtherance of a decision that produces a legal or similarly significant effect concerning them.The right to opt-out of the collection of sensitive data, including precise geolocation data, or the processing of sensitive data; and The right to opt-out of the collection of personal data collected through the operation of a voice recognition or facial recognition feature.We will respond to any of the above requests within forty-five days. We may extend this deadline once by an additional 15 days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five-day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address]
If we decline to take action regarding your request, we shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen (14) days of receipt of our initial response to the following:
[state specific appeal email address]
We shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions within sixty (60) days of receipt of your appeal.
Oregon (7/1/2024)The right to confirm whether we are processing, or have processed, their personal information and the categories of personal information we are processing or have processed;The right to request a list of third parties to whom we have disclosed, at our option, either their personal information or any personal information;The right to obtain a copy of their personal information we are processing or have processed;The right to correct inaccuracies in the their personal data, taking into account the nature of the Personal Information and the purposes of the processing of the their personal information;The right to delete personal information provided by or obtained about them; The right to opt out of the processing of their personal information for the purposes of:Targeted advertising;The sale of personal information; orProfiling in furtherance of a decision that produces a legal or similarly significant effect concerning them.We will respond to any of the above requests within forty-five (45) days. We may extend this deadline once by an additional forty-five (45) days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five (45) day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address]
If we decline to take action regarding your request, we shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen (14) days of receipt of our initial response to the following:
[state specific appeal email address]
We shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions within forty-five (45) days of receipt of your appeal. If unsatisfied, you may file a complaint with the Oregon Attorney General at File a Consumer Complaint | Office of the Attorney General (https://justice.oregon.gov/consumercomplaints).
Delaware (1/1/2025)The right to confirm whether we are processing their personal information and to access that personal data;The right to correct inaccuracies in the their personal data, taking into account the nature of the Personal Information and the purposes of the processing of the their personal information;The right to delete personal information provided by or obtained about them; The right to obtain a copy of the personal data about them possessed by us in a portable and readily usable format;The right to obtain a list of categories of third parties to which the controller has disclosed their Personal Information;The right to opt out of the processing of their personal information for the purposes of:Targeted advertising;The sale of personal information; orProfiling in furtherance of a decision that produces a legal or similarly significant effect concerning themWe will respond to any of the above requests within forty-five (45) days. We may extend this deadline once by an additional forty-five (45) days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five (45) day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:
[contact person][mailing address][state specific email address]
If we decline to take action regarding your request, we shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen (14) days of receipt of our initial response to the following:
[state specific appeal email address]
We shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions within forty-five (45) days of receipt of your appeal. If unsatisfied, you may file a complaint with the Oregon Attorney General at File a Consumer Complaint | Deprtment of Justice (https://attorneygeneral.delaware.gov/fraud/cmu/complaint/).

Stay in the know

We invite you to join our community, share your stories, and unlock rewards.

We promise we won't spam you! Let us know what you're interested in seeing by clicking the checkboxes below so you will only receive communications about what you actually care about.