Oregon Consumer Privacy Act – Privacy Rights for Oregon Residents


At ColorfulWorld, we respect your privacy and are committed to ensuring transparency regarding your personal data. This policy outlines your rights as an Oregon resident under the Oregon Consumer Privacy Act (OCPA)and provides guidance on how to exercise these rights.

 

Your Rights as an Oregon Resident

As a resident of Oregon, you have the following rights concerning your personal data:

  • Right to Access – You may request confirmation of whether we process your personal data, along with access to a copy of your data and details on what we collect, why we collect it, and who we share it with.
  • Right to Correction – You may request corrections to inaccurate or outdated personal data.
  • Right to Deletion – You can request that we delete certain personal data, subject to legal and business exceptions.
  • Right to Data Portability – You may request that we transfer personal data you have provided to us to another company.
  • Right to Opt-Out – You can opt out of:Targeted advertising based on your personal data.

          a. The "sale" of your personal data.

          b. Profiling that produces legal or similarly significant effects concerning you.

  • Right to Notification – You will be informed if your personal data is involved in a data breach.

 

Your Right to Opt-Out

If you are an Oregon resident, you have the right to opt out of the "sale" of your personal data to "third parties."

What Does ‘Sale’ Mean?

Under the OCPA, "sale" is defined broadly. It includes not only the exchange of data for money but also transfers of personal data to third parties for "monetary consideration."

We do not sell your personal data in exchange for money, nor do we intend to do so. However, we may share certain personal data with third parties to operate our business (e.g., for marketing and service improvements). Since this could be interpreted as a "sale," we provide an opt-out option for additional transparency and control over your data.

Effects of Opting Out

Opting out may impact certain aspects of your experience with us:

  • Marketing & Communications – If you opt out, we may be unable to send you certain marketing messages and promotions.
  • Business Partnerships – Some of our business partners may be classified as "third parties" under the OCPA. If they do not meet the legal definition of a "processor," we may need to restrict data transfers, which could affect certain services.
  • Service Limitations – If a critical partner cannot comply with required contractual terms, some website features or services may not work as expected.

If you opt out and later engage in a transaction requiring third-party data transfer, we may prompt you for consent to proceed.

 

Minors' Data Protection

We do not knowingly "sell" personal data of individuals under the age of 16. Additionally, we do not collect or process data of individuals under 13 without verified parental consent.

 

Exceptions to the Right to Opt-Out

Certain data transfers are not considered "sales" under the OCPA, including:

1.  Processor Transfers – We may transfer data to processors, which are businesses that handle data on our behalf under strict contractual agreements. These include partners who provide fraud detection, security services, or transaction processing.

2.  Consumer-Directed Transfers – If you direct us to interact with a third party (e.g., using a specific payment processor), we will transfer the necessary data, even if you have opted out.

3.  Internal Use & Anonymized Data – Opting out does not affect our ability to collect, process, or share anonymized or pseudonymized data that cannot be linked to you.

 

Technical Limitations of Opt-Out Requests

  • Identifying Your Data – We make reasonable efforts to prevent the sale of your personal data when you opt out. However, if we cannot link certain information to you, it may still be subject to transfer.
  • Opt-Out Does Not Equal Unsubscribe – Opting out of data sales does not unsubscribe you from marketing emails. To unsubscribe from emails, use the unsubscribe link in our communications. To stop text messages, follow the opt-out instructions for the specific program.
  • Multiple Email Addresses – If you use multiple email addresses, you must submit a separate opt-out request for each one, as we cannot automatically link multiple addresses to a single request.

 

How to Make an Opt-Out Request

To opt out of the "sale" of your personal data, contact us via email at welcome@colorfulworldelephantlight.com.

  • You do not need to create an account to submit a request.
  • If you are requesting an opt-out for an email address different from the one on your account, you must submit the request using that email.
  • If you need to opt out of multiple email addresses, each address must be provided separately.

 

How to Appeal a Decision on Your Request

If we deny a request, our response will include:

  • The reason for the denial.
  • Instructions on how to appeal the decision.

Under Oregon law, you may appeal within a reasonable time after receiving a denial. We will respond to appeals within 45 days, informing you in writing of any actions taken or not taken.

If your appeal is denied, you have the right to contact the Oregon Attorney General to submit a complaint.

 

MORE ON PRIVACY

We are committed to protecting your privacy. For more details, please review our Privacy Policy.

For further inquiries, contact us at welcome@colorfulworldelephantlight.com.