California’s “Shine the Light” law permits our customers who are California residents to request and obtain from us a list of what personal data (if any) we disclosed to third parties for their own direct marketing purposes in the previous calendar year and the names and addresses of those third parties. Requests may be made only once per year per person, must be sent to [email protected], and are free of charge. However, we do not disclose personal data protected under the “Shine the Light” law to third parties for their own direct marketing purposes.

The California Consumer Privacy Act (“CCPA”) provides our customers who are California residents the following additional rights:

• Request access to specific pieces of personal data collected about you;
• Request to know the personal data we process about you;
• Request to know the personal data we sell or share about you;
• Request rectification of inaccuracies in your personal data;
• Request deletion of personal data about you;
• Request data portability, your requested information will be provided in a readily usable format to allow transmission to other organizations; and
• Request to limit the use or disclosure of your sensitive personal data.

To exercise your California privacy rights described above, please submit a verifiable request to us by emailing us at [email protected].

No Sale of Personal Data. Under the CCPA, if a business sells Personal Data, it must allow California residents to opt out of the sale of their Personal Information. However, we do not “sell” and have not “sold” Personal Information in the preceding 12 months for purposes of the CCPA. For example, and without limiting the foregoing, we do not “sell” the Personal Information of minors under 16 years of age.

Consumer Request by an Authorized Agent. If any authorized agent submits a consumer request on your behalf, in order to confirm that person or entity’s authority to act on your behalf and verify the authorized agent’s identity, we require an email be sent to [email protected], along with all of the below items:

• Proof that you gave the authorized agent signed permission to submit the request.
• Sufficient information to verify the authorized agent’s identity, depending on the nature of the request.
• To verify your identity, depending on the nature of the request, we may also require a valid Government Issued ID (not expired).

We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. Making a verifiable consumer request does not require creating an account with us. However, if you have an existing login, we will require you to log in to submit a request. We will only use personal data provided in a verifiable consumer request to verify the request’s identity or authority to make the request.

California Minor Content Removal. Our Site is not intended for use by children under the age of 13, or 16 where applicable. In addition, we do not knowingly collect personal information from children under the age of 13 (or 16 where applicable) through our Site, although certain third-party sites that we link to may do so. These third-party sites have their own terms of use and privacy policies and we encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children to never provide information on our Site without their permission. If you are a resident of California, under 18, and a registered user of our services, you may ask us to remove content or information that you have posted to these services by contacting us at [email protected]. Please note that your request does not ensure complete or comprehensive removal of the content or information, as, for example, some of your content may have been reposted by another user.

Involvement of Parents or Guardians. In accordance with the provisions of the Children’s Online Privacy Act, in the event that we do begin collecting any personal information or data from children under the age of 13 (or 16 where applicable), we will notify parents first, and will seek parental or guardian consent to collect, use, and/or disclose such information from children under the age of 13 (or 16 where applicable). A parent may review and have their child’s personal information deleted and may refuse to permit further collection or use of their child’s information by notifying us. If you have reason to believe that a child under the age of 13 (or 16) has provided personal information, please contact us in sufficient detail to enable us to delete that information from our databases.
Your European Union and UK Privacy Rights
In addition to the above-listed rights, European Union and UK privacy laws provide individuals with enhanced rights in respect of their personal data. These rights may include, depending on the circumstances surrounding the processing of personal data:

• The right to object to decisions based on profiling or automated decision-making that produce legal or similarly significant effects on you;
• The right to request restriction of processing of personal data or object to processing of personal data carried out pursuant to (i) a legitimate interest (including, but not limited to, processing for direct marketing purposes) or (ii) performance of a task in the public interest;
• In certain circumstances, the right to data portability, which means that you can request that we provide certain personal data we hold about you in a machine-readable format; and
• In certain circumstances, the right to erasure and/or the right to be forgotten, which means that you can request deletion or removal of certain personal data we process about you.

Note that we may need to request additional information from you to validate your request. To exercise any of the rights above, please email us at [email protected].