Colorado Privacy Act (CPA) Notice for Colorado Residents

YOUR RIGHTS

Key Emphasis: As a Colorado resident, you have specific rights regarding your personal data, allowing you to control its collection, use, and disclosure.

We are committed to transparency and providing you with control over your personal information. Under the Colorado Privacy Act (CPA), you have the following rights:

  • Right to Access: You may request confirmation regarding whether we are processing your personal data. You may also request a copy of your data and details regarding: a. The categories of data collected, b. The purposes for collection, and c. Disclosures to third parties.
  • Additionally, you may share this copy with other companies.Right to Correct: You may request corrections to any inaccurate personal data we hold about you.
  • Right to Delete: You may request the deletion of some or all of your personal data, subject to certain legal and business exceptions.
  • Right to Opt-Out: You have the right to opt out of the processing of your personal data for:

          a. Targeted advertising,

          b. The sale of personal data, or

          c. Profiling that results in legal or similarly significant effects on you.(See below for details on opting out.)

 

RIGHT TO OPT-OUT

Key Emphasis: You may opt out of the "sale" of your personal data to third parties, though the law defines "sale" broadly.

If you are a Colorado resident, you may opt out of the "sale" of your personal information to third parties. Under the CPA, a "sale" includes any exchange of personal data for "monetary or other valuable consideration."

We do not sell personal data in exchange for money and will not do so. However, we may transfer certain personal data to third parties for business operations, such as marketing and service provision. Although we do not consider this a "sale,"some may interpret it as one under the CPA. If you opt out, we will cease such transfers, except as permitted by law.

Potential Impacts of Opting Out

  • The law defines "third parties" broadly. If we cannot obtain specific contractual commitments from certain business partners, we may be required to cease transferring data to them. This could impact your ability to receive marketing communications and use certain website features.
  • If a specific transaction requires data transfer to a third party, we will inform you so that you can opt in if you wish to proceed.
  • Minors: We do not sell personal data of individuals under 16 and do not knowingly collect data from individuals under 13.

Exceptions to the Opt-Out Right

Certain data transfers are not considered "sales" under the CPA, including:

  • Transfers to "processors" who provide contracted services (e.g., fraud detection, data security). Processors are legally prohibited from using your data for their own purposes.
  • Transfers that you directly authorize (e.g., using a payment processor to complete a purchase).
  • Collection and internal use of personal data for operational purposes, which is not subject to opt-out requests.
  • Transfers of anonymized or pseudonymized data, as this does not constitute "personal information."

Technical Limitations of Opting Out

Due to technical constraints, we may not always be able to identify all data linked to you. Where reasonably possible, we will comply with opt-out requests. However, some data may still be transferred if it cannot be reliably linked to you.

Opting Out vs. Unsubscribing

Opting out of data "sales" does not unsubscribe you from marketing emails or text messages. To unsubscribe from such communications, follow the "unsubscribe" link in our emails or text messages.

 

HOW TO MAKE A REQUEST

Key Emphasis: You may submit opt-out requests via email, and we will verify your identity before processing them.

To opt out of the "sale" of your data, email us at welcome@colorfulworldelephantlight.com. You will not be required to create an account to submit an opt-out request.

If you request to opt out using an email address different from the one associated with your account, you must specify each email address separately. We cannot reasonably link multiple email addresses unless they are explicitly provided.

If you opt out via email, we cannot set a tracking cookie on your device. As a result, our ability to fully prevent data "sales" may be limited.

 

HOW TO APPEAL A DECISION PERTAINING TO A REQUEST

Key Emphasis: If we deny a request, you have the right to appeal within a reasonable timeframe.

If we deny your request, we will provide a written explanation, including instructions on how to appeal. Under Colorado law, you must submit an appeal within a reasonable timeframe after receiving our decision. We will respond to your appeal within 45 days, informing you of any actions taken or not taken.

If your appeal is denied, you may submit a complaint to the Colorado Attorney General.

 

MORE ON PRIVACY

We take the security and privacy of your data seriously. To learn more, please review our Privacy Policy.

For further inquiries, contact us at welcome@colorfulworldelephantlight.com.