Iowa Data Protection Act – Privacy Rights for Iowa Residents

At ColorfulWorld, we respect your privacy and are committed to transparency regarding your personal data. This policy outlines your rights as an Iowa resident under the Iowa Data Protection Act (IDPA) and provides guidance on how to exercise these rights.

Your Rights as an Iowa Resident

As a resident of Iowa, you have the following rights concerning your personal data:

  • Right to Access – You may request confirmation of whether we process your personal data, obtain a copy of your data, and receive details about what we collect, why we collect it, and with whom we share it.
  • Right to Deletion – You may request the deletion of certain personal data, subject to legal and business exceptions.
  • Right to Data Portability – You may request that we transfer the personal data you have provided to another company.
  • Right to Opt-Out – You may opt out of:Targeted advertising based on your personal data.

          a. The sale of your personal data.

Unlike some other states, Iowa does not provide a specific right to correction under the IDPA.

 

Your Right to Opt-Out

If you are an Iowa resident, you have the right to opt out of the sale of your personal data to third parties.

What Does ‘Sale’ Mean?

Under the IDPA, "sale" refers to the exchange of personal data for monetary consideration to a third party.

We do not sell your personal data for money; however, we may share certain data with third parties to operate our business (e.g., analytics and marketing). Since this could be interpreted as a sale, we provide an opt-out option to ensure transparency and give you control over your data.

Effects of Opting Out

Opting out may impact certain aspects of your experience with us, including:

  • Marketing & Communications – Opting out may limit our ability to send you certain promotions.
  • Business Partnerships – Some of our partners may be classified as third parties under IDPA, which may restrict data transfers and affect certain services.
  • Service Limitations – If a critical partner cannot comply with the required restrictions, some features may not function as expected.

If you opt out and later engage in a transaction that requires third-party data transfer, we may prompt you for consent before proceeding.

 

Minors' Data Protection

We do not knowingly "sell" the personal data of individuals under 16 years old. Additionally, we do not collect or process data from individuals under 13 without verified parental consent.

 

Exceptions to the Right to Opt-Out

Certain data transfers are not considered sales under the IDPA, including:

1.  Processor Transfers – We may transfer data to processors who handle data on our behalf under strict contractual agreements.

2.  Consumer-Directed Transfers – If you direct us to interact with a third party (e.g., using a specific payment processor), we will process the necessary data accordingly.

3.  Internal Use & Anonymized Data – Opting out does not affect our ability to collect, process, or share anonymized or pseudonymized data that cannot be linked to you.

 

Technical Limitations of Opt-Out Requests

  • Identifying Your Data – We make reasonable efforts to prevent the sale of your personal data when you opt out. However, if we cannot link certain information to you, it may still be subject to transfer.
  • Opt-Out Does Not Equal Unsubscribe – Opting out of data sales does not unsubscribe you from marketing emails. To unsubscribe from emails, use the unsubscribe link in our communications. To stop text messages, follow the opt-out instructions for the specific program.
  • Multiple Email Addresses – If you use multiple email addresses, you must submit a separate opt-out request for each one, as we cannot automatically link multiple addresses to a single request.

 

How to Make an Opt-Out Request

To opt out of the sale of your personal data, contact us via email at:

📧 welcome@colorfulworldelephantlight.com

  • No account creation is required.
  • If submitting a request for a different email address, it must be submitted using that email address.
  • Separate opt-out requests must be submitted for multiple email addresses.

 

How to Appeal a Decision on Your Request

If we deny your request, we will provide:

  • The reason for the denial.
  • Instructions on how to appeal.

You may appeal within 30 days of receiving a denial. We will respond within 60 days with the final decision.

 

MORE ON PRIVACY

We are committed to protecting your privacy. For more details, please review our Privacy Policy.

For further inquiries, contact us at welcome@colorfulworldelephantlight.com.