Healthy Hair Inc. Privacy – Healthy Hair Inc

Healthy Hair Inc. Privacy Policy

Contact Form By filling in the contact form on this application, users provide the following personal data: city, company name, county, email address, first name, last name, number of employees, phone number, and website. This data is used to respond to requests for information, quotes, or other inquiries as indicated by the form’s header.

Owner Contact Information

Healthy Hair Inc.

2640 Business Park Drive

Vista, Ca. 92081

Email: info@easihairpro.com

Brands: easihair pro, Habit Hair, Amplify Hair Extensions

Data Collected

This application collects the following types of personal data, either by itself or through third parties: first name, last name, phone number, company name, county, email address, city, number of employees, and website.

Details on each type of personal data collected are provided in the relevant sections of this privacy policy or through specific explanations displayed prior to data collection. Users may freely provide personal data, or usage data may be collected automatically when using this application. Unless stated otherwise, all data requested by this application is mandatory, and failure to provide it may prevent the application from offering its services. When the application specifies that some data is not mandatory, users are free to withhold such data without affecting the availability or functionality of the service. Users uncertain about which personal data is mandatory are encouraged to contact the owner.

Any use of cookies or other tracking tools by this application or by the owners of third-party services used by this application serves the purpose of providing the required service, in addition to other purposes described in this document and in the Cookie Policy.

Users are responsible for any third-party personal data they obtain, publish, or share through this application.

Processing the Data

Methods of Processing The owner employs appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the data. Data processing is conducted using computers and IT-enabled tools following organizational procedures strictly related to the purposes outlined. In some instances, data may be accessible to certain individuals involved in the operation of this application (administration, sales, marketing, legal, system administration) or to external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed as data processors by the owner. An updated list of these parties can be requested from the owner at any time.

Location of Processing Data is processed at the owner’s operating offices and other locations where involved parties are situated. Depending on the user’s location, data transfers may involve transferring data to a country other than the user’s. For more information about where transferred data is processed, users can refer to the section detailing the processing of personal data.

Retention of Personal Data Unless specified otherwise in this document, personal data is processed and stored for as long as necessary to fulfill the purposes for which it was collected. Data may be retained longer if required by legal obligations or with the user’s consent.

Purposes of Processing User data is collected to enable the owner to provide its service, comply with legal obligations, respond to enforcement requests, protect its rights and interests (or those of users or third parties), and detect any malicious or fraudulent activity. Specific information about the personal data used for each purpose can be found in the “Detailed Information on the Processing of Personal Data” section.

Processing of Personal Data

Contacting the User

Contact Form (This Application) By filling in the contact form on this application, users authorize the use of their data to respond to requests for information, quotes, or other inquiries as indicated by the form’s header. Personal data processed includes city, company name, county, email address, first name, last name, number of employees, phone number, and website.

Category of Personal Information Collected According to the CCPA: Identifiers, commercial information, internet or other electronic network activity information.

Cookie Policy This application uses trackers. For more information, users may consult the Cookie Policy.

Additional Information for Users in the European Union

This section applies to users in the European Union, according to the General Data Protection Regulation (GDPR). It supersedes any conflicting information in the privacy policy. Detailed information regarding the categories of data processed, purposes of processing, categories of recipients, and more can be found in the “Detailed Information on the Processing of Personal Data” section.

Legal Basis of Processing The owner may process personal data if one of the following applies:

Users have given their consent for one or more specific purposes.
Data is necessary for the performance of an agreement with the user or for pre-contractual obligations.
Processing is necessary for compliance with a legal obligation.
Processing is related to a task carried out in the public interest or in the exercise of official authority vested in the owner.
Processing is necessary for legitimate interests pursued by the owner or by a third party.

The owner will clarify the specific legal basis that applies to the processing and whether the provision of personal data is a statutory or contractual requirement or a requirement necessary to enter into a contract.

Additional Information About Retention Period Unless specified otherwise in this document, personal data is processed and stored for as long as necessary for the purposes it was collected. Data may be retained longer if required by legal obligations or with the user’s consent.

Personal Data Collected for Contract Performance: Retained until the contract is fully performed.
Personal Data Collected for Legitimate Interests: Retained as long as needed to fulfill such purposes.
The owner may retain personal data for a longer period if the user has given consent, as long as such consent is not withdrawn. Data may also be retained longer if required to fulfill a legal obligation or by order of an authority.

Once the retention period expires, personal data will be deleted. Therefore, the rights to access, erasure, rectification, and data portability cannot be enforced after the retention period.

User Rights Under the GDPR

Users may exercise certain rights regarding their data processed by the owner. To the extent permitted by law, users have the right to:

Withdraw consent at any time.
Object to data processing.
Access their data.
Verify and seek rectification.
Restrict data processing.
Have their personal data deleted.
Receive their data and have it transferred to another controller.
Lodge a complaint.

Users are also entitled to learn about data transfers abroad, including to international organizations governed by public international law, and the security measures taken by the owner.

Right to Object to Processing

Where personal data is processed for public interest, in the exercise of official authority, or for legitimate interests, users may object by providing a ground related to their situation. If data is processed for direct marketing purposes, users can object at any time without providing any justification, and personal data will no longer be processed for such purposes.

How to Exercise These Rights

Requests to exercise user rights can be directed to the owner through the contact details provided in this document. These requests are free of charge and will be addressed by the owner as early as possible and always within one month, providing users with the information required by law. Any rectification or erasure of personal data or restriction of processing will be communicated by the owner to each recipient, if any, unless this proves impossible or involves disproportionate effort. At the user’s request, the owner will inform them about those recipients. Top of Form

Additional Information for California Consumers

This section of the document supplements the information in the rest of the privacy policy and is provided by the business operating this application and, if applicable, its parent, subsidiaries, and affiliates (collectively referred to as “we,” “us,” or “our”).

This section applies to all users who are consumers residing in California, United States of America, in accordance with the “California Consumer Privacy Act of 2018” (CCPA), as updated by the “California Privacy Rights Act” (CPRA) and subsequent regulations. For these consumers, this section takes precedence over any conflicting information in the privacy policy.

The term “personal information” in this document is used as defined in the CCPA/CPRA.

Notice at Collection

Categories of Personal Information Collected, Used, Sold, or Shared

In this section, we summarize the categories of personal information we have collected, used, sold, or shared and their purposes. Detailed information can be found in the “Detailed Information on the Processing of Personal Data” section of this document.

Information We Collect: Categories of Personal Information

We have collected the following categories of personal information:

Identifiers
Commercial information
Internet or other electronic network activity information

We do not collect sensitive personal information.

We will notify you if we collect additional categories of personal information.

Purposes for Using Your Personal Information

We may use your personal information for the operational functioning of this application and its features (“business purposes”). Your personal information will be processed as necessary and proportionate to the business purposes for which it was collected and within the limits of compatible operational purposes.

We may also use your personal information for other reasons, such as for commercial purposes (as detailed in the “Detailed Information on the Processing of Personal Data” section), complying with the law, and defending our rights before competent authorities when our rights and interests are threatened, or we suffer actual damage.

We will not process your information for unexpected or incompatible purposes without your consent.

Retention of Personal Information

Unless otherwise stated in the “Detailed Information on the Processing of Personal Data” section, we will not retain your personal information longer than necessary for the purposes for which it was collected.

Sources of Personal Information

We collect the above-mentioned categories of personal information directly or indirectly from you when you use this application.

For example, you provide personal information directly when submitting requests via forms on this application. You also provide personal information indirectly when navigating this application, as your personal information is automatically observed and collected.

Disclosure of Personal Information for Business Purposes

We do not disclose your personal information to third parties. “Third party” means any person who is not a service provider or contractor, as defined by the CCPA.

Sale or Sharing of Personal Information

“Sale” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information to a third party for monetary or other valuable consideration, as defined by the CCPA.

“Sharing” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

Exchanging personal information with a service provider pursuant to a written contract that meets CCPA requirements does not constitute a sale or sharing of personal information.

Your Right to Opt-Out of the Sale or Sharing of Your Personal Information

You have the right to opt-out of the sale or sharing of your personal information. Upon your request, we will stop selling or sharing your personal information. You can exercise this right freely at any time without submitting a verifiable request. To opt-out, contact us using the details provided in this document or use the privacy choices link provided on this application.

You can also submit opt-out requests via a user-enabled global privacy control, such as the Global Privacy Control (GPC). More information about GPC is available here.

We will use personal information collected in connection with your opt-out request solely for compliance purposes.

Once you have opted out, we must wait at least 12 months before asking if you have changed your mind.

Your Privacy Rights Under the California Consumer Privacy Act

1. Right to Access Personal Information

You have the right to request that we disclose to you:

The categories of personal information we collect about you.
The sources from which personal information is collected.
The purposes for which we use your information.
To whom we disclose such information.
The specific pieces of personal information we have collected about you.

You also have the right to know what personal information is sold or shared and to whom. Specifically, you have the right to request two separate lists:

The categories of personal information that we sold or shared about you and the categories of third parties to whom the personal information was sold or shared.
The categories of personal information disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.

These disclosures will cover the preceding 12 months.

2. Right to Request Deletion of Personal Information

You have the right to request that we delete any of your personal information, subject to legal exceptions (e.g., identifying and repairing errors, detecting security incidents, protecting against fraudulent or illegal activities, exercising certain rights).

3. Right to Correct Inaccurate Personal Information

You have the right to request that we correct any inaccurate personal information we maintain about you.

4. Right to Opt-Out of Sale or Sharing of Personal Information

You have the right to opt-out of the sale or sharing of your personal information. You also have the right to request that we limit our use or disclosure of your sensitive personal information.

5. Right to Non-Discrimination

We will not discriminate against you for exercising your rights under the CCPA. This means we will not deny you goods or services, charge you a different price, or provide a different level or quality of goods or services just because you exercised your consumer privacy rights.

However, if your personal information or its sale is necessary for us to provide you with goods or services, we may not be able to complete that transaction if you opt out or request deletion.

We may offer promotions, discounts, and other deals in exchange for collecting, keeping, or selling your personal information, provided the financial incentive is reasonably related to the value of your personal information.

How to Exercise Your Rights

To exercise the rights described above, submit your verifiable request by contacting us via the details provided in this document. To respond to your request, we need to verify your identity. Therefore, your request must:

Provide sufficient information to reasonably verify you are the person about whom we collected personal information or an authorized representative.
Describe your request with sufficient detail to allow us to understand, evaluate, and respond to it.

We will not respond to requests if we cannot verify your identity. Making a verifiable consumer request does not require you to create an account with us. We will use any personal information collected in connection with your request solely for verification purposes.

If you cannot personally submit a verifiable request, you can authorize a person registered with the California Secretary of State to act on your behalf. If you are an adult, you can make a verifiable request on behalf of a child under your parental authority. You can submit a maximum of two requests over a 12-month period.

Handling Your Request

We will confirm receipt of your verifiable request within 15 days and provide information about how we will process your request. We will respond within 30 days. If we need more time, we will explain why and how much more time we need, up to 75 days.

Our disclosures will cover the preceding 12 months. For personal information collected on or after January 1, 2022, you have the right to request disclosure beyond the 12-month period unless it proves impossible or involves disproportionate effort.

If we deny your request, we will explain why.

We do not charge a fee to process or respond to your verifiable request unless it is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request, explaining our choices and reasons.

Additional Information for Colorado Consumers

This section supplements the information in the rest of the privacy policy and is provided by the business operating this application and, if applicable, its parent, subsidiaries, and affiliates (collectively referred to as “we,” “us,” or “our”).

This section applies to all users residing in Colorado, in accordance with the “Colorado Privacy Act” (CPA). For these consumers, this section takes precedence over any conflicting information in the privacy policy.

The term “personal data” in this document is used as defined in the CPA.

Categories of Personal Data Processed

In this section, we summarize the categories of personal data we have processed and the purposes thereof. Detailed activities are described in the “Detailed Information on the Processing of Personal Data” section of this document.

Categories of Personal Data We Collect

We have collected the following categories of personal data:

Identifiers
Commercial information
Internet activity information

We do not collect sensitive data.

We will notify you if we collect additional categories of personal data.

Purposes for Processing Your Personal Data

To find out why we process your personal data, refer to the sections titled “Detailed Information on the Processing of Personal Data” and “The Purposes of Processing” within this document.

We will not process your information for unexpected or incompatible purposes without your consent. You can freely give, deny, or withdraw such consent at any time using the contact details provided in this document.

How We Use and Share Your Personal Data

We do not share or disclose your personal data to third parties. For our purposes, “third party” means any person, public authority, agency, or body other than a consumer, controller, processor, or an affiliate of the processor or the controller as defined by the CPA.

Sale of Your Personal Data

Our use of your personal data may be considered a sale under the CPA. For our purposes, “sale” means the exchange of personal data for monetary or other valuable consideration by a controller to a third party, as defined by the CPA.

Please note that disclosing personal data to a processor that processes data on behalf of a controller does not constitute a sale. Other specific exceptions set forth in the CPA may also apply.

Your Right to Opt Out of the Sale of Your Personal Data

You have the right to opt out of the sale of your personal data. This means that whenever you request us to stop selling your data, we will comply.

To exercise your right to opt out, contact us at any time using the contact details provided in this document. You can also use the privacy choices link provided on this application for a simplified opt-out method.

We use any personal data collected from you in connection with your opt-out request solely to comply with the request.

Processing of Your Personal Data for Targeted Advertising

We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and grant your right to opt out.

“Targeted advertising” means displaying an advertisement to a consumer that is selected based on personal data obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications, or online services to predict consumer preferences or interests, as defined by the CPA.

Targeted advertising does not include advertisements directed to a consumer in response to the consumer’s request for information or feedback, advertisements based on activities within a controller’s own websites or applications, advertisements based on the context of a consumer’s current search query or visit to a website or application or processing personal data solely to measure or report advertising performance.

Universal Opt-Out Mechanism: Global Privacy Control

If you want to submit requests to opt out of targeted advertising via a user-enabled global privacy control, such as the Global Privacy Control (GPC), you are free to do so, and we will comply. The GPC consists of a setting or extension in the browser or mobile device indicating support for the GPC signal. More information about GPC is available here.

Your Privacy Rights Under the Colorado Privacy Act

You may exercise certain rights regarding your data processed by us, including:

Opt Out of Processing: You have the right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
Access Personal Data: You have the right to request confirmation of whether we are processing your personal data and to access that data.
Correct Inaccurate Personal Data: You have the right to request that we correct any inaccurate personal data.
Request Deletion: You have the right to request the deletion of your personal data.
Obtain a Copy: You have the right to receive your personal data in a portable and usable format that allows you to transfer it easily to another entity.

We will not increase the cost or decrease the availability of a product or service based solely on the exercise of your rights unrelated to the feasibility or value of a service. However, to the extent permitted by law, we may offer a different price, rate, level, quality, or selection of goods or services if related to voluntary participation in a loyalty, rewards, premium features, discounts, or club card program.

How to Exercise Your Rights

To exercise the rights described above, submit your request by contacting us via the contact details provided in this document. We need to verify your identity and understand which right you wish to exercise.

We will not respond to requests if we cannot verify your identity using commercially reasonable efforts. In such cases, we may request additional information necessary to authenticate you and your request.

You do not need to create an account to make a consumer request, but we may require you to use your existing account. We will use any personal data collected in connection with your request solely for authentication purposes.

If you are an adult, you can make a request on behalf of a child under your parental authority.

Handling Your Request

We will respond to your request without undue delay, but no later than 30 days after receipt. If we need more time, we will explain why and how much more time is required, up to 60 days.

If we deny your request, we will explain the reasons within 30 days of receipt. You have the right to appeal such a decision by submitting a request via the contact details provided. We will inform you in writing within 30 days of any action taken or not taken in response to the appeal, including an explanation of our decision. If the appeal is denied, you may contact the Attorney General to submit a complaint.

We do not charge a fee to respond to your request, up to two requests per year.

Additional Information for Connecticut Consumers

This section supplements the information in the rest of the privacy policy and is provided by the business operating this application and, where applicable, its parent, subsidiaries, and affiliates (collectively referred to as “we,” “us,” or “our”).

This section applies to all users residing in Connecticut, in accordance with “An Act Concerning Personal Data Privacy and Online Monitoring” (also known as the “Connecticut Data Privacy Act” or “CTDPA”). For these consumers, this section takes precedence over any conflicting information in the privacy policy.

The term “personal data” in this document is used as defined in the CTDPA.

Categories of Personal Data Processed

Categories of Personal Data We Collect

We have collected the following categories of personal data:

Identifiers
Commercial information
Internet activity information

We do not collect sensitive data.

We will notify you if we collect additional categories of personal data.

Purposes for Processing Your Personal Data

To find out why we process your personal data, refer to the sections titled “Detailed Information on the Processing of Personal Data” and “The Purposes of Processing” within this document.

How We Use and Share Your Personal Data

Sale of Your Personal Data

Our use of your personal data may be considered a sale under the CTDPA. For our purposes, “sale” means the exchange of personal data for monetary or other valuable consideration by a controller to a third party, as defined by the CTDPA.

Please note that disclosing personal data to a processor that processes data on behalf of a controller does not constitute a sale. Other specific exceptions set forth in the CTDPA may also apply.

Your Right to Opt-Out of the Sale of Your Personal Data

You have the right to opt out of the sale of your personal data. This means that whenever you request us to stop selling your data, we will comply.

We use any personal data collected from you in connection with your opt-out request solely to comply with the request.

Processing of Your Personal Data for Targeted Advertising

We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and grant your right to opt out.

“Targeted advertising” means displaying an advertisement to a consumer that is selected based on personal data obtained or inferred over time from the consumer’s activities across non-affiliated websites, applications, or online services to predict consumer preferences or interests, as defined by the CTDPA.

Targeted advertising does not include advertisements based on activities within a controller’s own websites or applications, advertisements based on the context of a consumer’s current search query, visit to a website or application, or processing personal data solely to measure or report advertising performance.

Universal Opt-Out Mechanism: Global Privacy Control

Your Privacy Rights Under the Connecticut Data Privacy Act

You may exercise certain rights regarding your data processed by us, including:

Access Personal Data: You have the right to request confirmation of whether we are processing your personal data and to access that data.
Correct Inaccurate Personal Data: You have the right to request that we correct any inaccurate personal data.
Request Deletion: You have the right to request the deletion of your personal data.
Obtain a Copy: You have the right to receive your personal data in a portable and usable format that allows you to transfer it easily to another entity.
Opt Out: You have the right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

How to Exercise Your Rights

If you are an adult, you can make a request on behalf of a child under your parental authority.

Handling Your Request

We will respond to your request without undue delay, but no later than 30 days after receipt. If we need more time, we will explain why and how much more time is required, up to 60 days.

If we deny your request, we will explain why within 30 days of receipt. You have the right to appeal such a decision by submitting a request via the contact details provided. We will inform you in writing within 30 days of any action taken or not taken in response to the appeal, including an explanation of our decision. If the appeal is denied, you may contact the Attorney General to submit a complaint.

We do not charge a fee to respond to your request, up to one request per year.

Additional Information for Utah Consumers

This section applies to all users residing in Utah, in accordance with the “Consumer Privacy Act” (UCPA). For these consumers, this section takes precedence over any conflicting information in the privacy policy.

The term “personal data” in this document is used as defined in the UCPA.

Categories of Personal Data Processed

Categories of Personal Data We Collect

We have collected the following categories of personal data:

Identifiers
Commercial information
Internet activity information

We do not collect sensitive data.

We will notify you if we collect additional categories of personal data.

Purposes for Processing Your Personal Data

To find out why we process your personal data, refer to the sections titled “Detailed Information on the Processing of Personal Data” and “The Purposes of Processing” within this document.

How We Use and Share Your Personal Data

We do not share or disclose your personal data to third parties. For our purposes, “third party” means any person other than the consumer, controller, processor, or an affiliate or contractor of the controller or processor, as defined by the UCPA.

Sale of Your Personal Data

Our use of your personal data may be considered a sale under the UCPA. For our purposes, “sale” means the exchange of personal data for monetary or other valuable consideration by a controller to a third party, as defined by the UCPA.

Please note that disclosing personal data to a processor that processes data on behalf of a controller does not constitute a sale. Other specific exceptions set forth in the UCPA may also apply.

Your Right to Opt Out of the Sale of Your Personal Data

You have the right to opt out of the sale of your personal data. This means that whenever you request us to stop selling your data, we will comply.

We use any personal data collected from you in connection with your opt-out request solely to comply with the request.

Processing of Your Personal Data for Targeted Advertising

We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and grant your right to opt out.

Your Privacy Rights Under the Utah Consumer Privacy Act

You may exercise certain rights regarding your data processed by us, including:

Access Personal Data: You have the right to request confirmation of whether we are processing your personal data and to access that data.
Request Deletion: You have the right to request the deletion of your personal data.
Obtain a Copy: You have the right to receive your personal data in a portable and usable format that allows you to transfer it easily to another entity.
Opt Out: You have the right to opt out of the processing of your personal data for targeted advertising or the sale of personal data.

How to Exercise Your Rights

If you are an adult, you can make a request on behalf of a child under your parental authority.

Handling Your Request

We will respond to your request without undue delay, but no later than 30 days after receipt. If we need more time, we will explain why and how much more time is required, up to 60 days.

We do not charge a fee to respond to your request, for up to one request per year.

Additional Information about Data Collection and Processing

Legal Action Your personal data may be used for legal purposes by the owner in court or in the stages leading to possible legal action arising from improper use of this application or the related services. You acknowledge that the owner may be required to reveal personal data upon request of public authorities.

Additional Information about Your Personal Data In addition to the information contained in this privacy policy, this application may provide you with additional and contextual information concerning particular services or the collection and processing of personal data upon request.

System Logs and Maintenance For operation and maintenance purposes, this application and any third-party services may collect files that record interaction with this application (system logs) or use other personal data (such as the IP address) for this purpose.

Information Not Contained in This Policy More details concerning the collection or processing of personal data may be requested from the owner at any time. Please see the contact information at the beginning of this document.

Changes to This Privacy Policy The owner reserves the right to make changes to this privacy policy at any time by notifying its users on this page and possibly within this application and/or – as far as technically and legally feasible – sending a notice to users via any contact information available to the owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed based on your consent, the owner will collect new consent from you, where required.

Additional Information for Virginia Consumers

This section applies to all users residing in Virginia, in accordance with the “Virginia Consumer Data Protection Act” (VCDPA). For these consumers, this section takes precedence over any conflicting information in the privacy policy.

The term “personal data” in this document is used as defined in the VCDPA.

Categories of Personal Data Processed

Categories of Personal Data We Collect

We have collected the following categories of personal data:

Identifiers
Commercial information
Internet activity information

We do not collect sensitive data.

We will notify you if we collect additional categories of personal data.

Purposes for Processing Your Personal Data

To find out why we process your personal data, refer to the sections titled “Detailed Information on the Processing of Personal Data” and “The Purposes of Processing” within this document.

How We Use and Share Your Personal Data

We do not share or disclose your personal data to third parties.

Sale of Your Personal Data

For our purposes, the term “sale” means any “exchange of personal data for monetary consideration by us to a third party“as defined by the VCDPA.

Please note that according to the VCDPA, disclosing personal data to a processor that processes data on behalf of a controller does not constitute a sale. Other specific exceptions set forth in the VCDPA may also apply.

As specified in the “Detailed Information on the Processing of Personal Data” section of this document, our use of your personal information may be considered a sale under the VCDPA.

Your Right to Opt Out of the Sale of Your Personal Data

You have the right to opt out of the sale of your personal data. This means that whenever you request us to stop selling your data, we will comply. To exercise your right to opt out, contact us at any time using the contact details provided in this document.

We use any personal data collected from you in connection with your opt-out request solely to comply with the request.

Processing of Your Personal Data for Targeted Advertising

We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and grant your right to opt out.

Your Privacy Rights Under the Virginia Consumer Data Protection Act

You may exercise certain rights regarding your data processed by us, including:

Access Personal Data: You have the right to request confirmation of whether we are processing your personal data and to access that data.
Correct Inaccurate Personal Data: You have the right to request that we correct any inaccurate personal data we maintain about you.
Request Deletion: You have the right to request the deletion of your personal data.
Obtain a Copy: You have the right to receive your personal data in a portable and usable format that allows you to transfer it easily to another entity.
Opt Out: You have the right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
Non-Discrimination: We will not discriminate against you for exercising your rights under the VCDPA. This means we will not deny goods or services, charge you a different price, or provide a different level or quality of goods or services just because you exercised your consumer privacy rights. However, if your personal data or its sale is necessary for us to provide you with goods or services, we may not be able to complete that transaction if you opt out or request deletion. To the extent permitted by law, we may offer a different price, rate, level, quality, or selection of goods or services if you exercise your right to opt out, or if our offer is related to your voluntary participation in a loyalty, rewards, premium features, discounts, or club card program.

How to Exercise Your Rights

To exercise the rights described above, submit your request by contacting us via the contact details provided in this document.

We need to verify your identity and understand which right you wish to exercise. We will not respond to requests if we cannot verify your identity using commercially reasonable efforts. In such cases, we may request additional information necessary to authenticate you and your request.

Making a consumer request does not require you to create an account with us. However, we may require you to use your existing account. We will use any personal data collected in connection with your request solely for authentication purposes.

If you are an adult, you can make a request on behalf of a child under your parental authority.

Handling Your Request

We will respond to your request without undue delay, but no later than 30 days after receipt. If we need more time, we will explain why and how much more time is required, up to 60 days.

If we deny your request, we will explain why within 30 days of receipt. You have the right to appeal such a decision by submitting a request via the contact details provided. We will inform you in writing within 60 days of any action taken or not taken in response to the appeal, including an explanation of our decision. If the appeal is denied, you may contact the Attorney General to submit a complaint.

We do not charge a fee to respond to your request, for up to two requests per year. If your request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.