Zippy Winner Privacy Policy

Zippy Winner – Privacy and Cookies Policy

Effective Date/Last Updated: 09/10/2024

Zippy Winner(“we,” “our,” or “us”) operates this website and other websites (“Website” or “Websites”) that enable users to enter prize giveaways and sweepstakes(“Contest”). We provide the following Privacy Policy ("Privacy Policy” or “Policy"), which describes how we collect, use, disclose, and share or sell information that is personally identifiable to a user (Information”). This Privacy Policy also discusses consumers’ data privacy rights under U.S. state law, including the California Consumer Privacy Act (“CCPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Montana Consumer Data Privacy Act ("MTCDPA"), the Texas Data Privacy Act ("TDSPA"), the Oregon Consumer Privacy Act ("OCPA"), and the Utah Consumer Privacy Act (“UCPA”) and how to exercise those rights. California Consumers: see below to read the California Notice at Collection within this Privacy Policy. Capitalized terms used but not defined herein shall have the same meaning as in the Website’s Terms and Conditions, which are fully incorporated herein by reference.  
  

ACCEPTANCE OF PRIVACY POLICY

By accessing and using one of our Websites, you signify your acceptance of this Privacy Policy and your agreement to the collection, use, disclosure, and sharing or sale of your Information as described herein. If you do not intend to agree to the terms of this Privacy Policy, DO NOT use the Website.   

PRIVACY POLICY UPDATES

This Privacy Policy is subject to change from time to time. Your continued use of the Website following the posting of changes to these terms will confirm your acceptance of all changes made, except for changes that expand the use of your Information. If we expand or alter the Information we collect or how we use it, we will notify users by: (a) sending the modified Policy to our users via email or (b) any other reasonable means acceptable under applicable state and federal law.   

FOR U.S. RESIDENTS ONLY  

Please note if you are not a U.S. resident, you are not permitted to use the Website and/or otherwise access any other Contests. 
  

CATEGORIES OF INFORMATION WE COLLECT   
  

We may collect the following categories of Information:  
  

Identifiers (such as real name, alias, postal, email and/or IP addresses, telephone numbers, birth date, and government-issued identification cards);
Personal information (such as the Identifiers listed above, gender, education, employment, employment history, financial information, home or automobile ownership, medical and health information, and insurance-related, including Medicare, information);
Biometric Data, in the form of users uploading a government-issued identification card along with a selfie or live video for the purpose of verifying their identity prior to claiming Contests;
Protected classification characteristics under state or federal law (which, depending on the state in which the user resides, can include race, religious creed, color, national origin, ancestry, age, marital status, medical condition, physical or mental disability, sex, gender, gender identity, gender expression, sexual orientation and military and veteran status);
Commercial information (including preferences, products or services purchased, obtained, or considered, or other purchasing data);
Internet or similar network activity (such as browsing and search history and information about a consumer’s interaction with a website, application, or advertisement) and information made available via Internet activity (such as device types, user agent data, referring URLs, and IP addresses);
Information related to a user’s consent to receive telemarketing calls, SMS messaging, push notifications, commercial email, and other forms of communication (which may include the creation of a report and session recordation of a user interacting with page(s) that seek to obtain a user’s prior express written consent” (as defined in the Telephone Consumer Protection Act (“TCPA”)) (“TCPA Consent”) to receive telemarketing and text messages;
Inferences drawn from other categories of Information (for example, a profile reflecting a person’s preferences, characteristics, psychological trends and attitudes);
Sensitive personal information (Some of the Information in the categories above may constitute sensitive personal information, as defined under certain data protection laws. See the U.S. State Law Rights and Disclosures section in this Privacy Policy to learn about your rights concerning such Information.).

HOW WE COLLECT INFORMATION   

We may collect Information from the following sources:  

Directly from users via registration forms, surveys, communications (including, with consent, business and commercial emails, telephone calls, USPS mail, and other contacts received from users), and, in the case of Biometric Data, when you upload your Information as part of the Contests claim process for Identity Verification; 
From publicly available sources, such as Internet search engines; 
Via our hosting servers, which collect Information from users through various technological means when users access and interact with the Website; 
From our service providers and contractors who assist us in hosting the Websites, providing customer support, and fulfilling Contests; 
From parties under our common control (which includes our parent, subsidiaries, and other entities under common control with us - collectively “Related Parties");

From businesses that we share or sell Information to, including our Marketing Partners, who may (a) send emails, push notifications, or SMS messages or make telemarketing calls to users, (b) drive users to our Website, and/or (c) advertise goods and services on the Website; 
From cookies (small text files placed on a user’s browser by a website such as the Website that track online behavior), web beacons (single-pixel GIF image files), and other technological means (collectively, “Cookies”); and 
By combining Information collected from various sources listed above, including our Marketing Partners and Related Parties, to augment and verify Information and to improve the overall quality of our services.

HOW WE MAY USE INFORMATION  
  

We may use Information in the following ways:  

For the purpose of providing you with information about our Contests and other content and products and/or services that we believe may be of interest to you, including sending email, direct mail, text/SMS message alerts, telemarketing messages and other communications that users have requested or consented to receive or that we are required to send concerning users’ registrations;
For Website operations, content improvements, testing, research, analysis, and product development;
To verify whether users are entitled to participate in the Contests Program and, if so, to fulfill Contests;

To provide users with customer service and respond to customer inquiries; 
To carry out our obligations and enforce our rights arising from any contracts entered into between users and us, including for purposes of our Arbitration Agreement, and any inquiry specific to express written consent under the Telemarketing Sales Rule (“TSR”) and/or the TCPA”); 
To detect, investigate, and respond to any fraudulent or malicious activity or any other activity we determine is or may be a violation of our Terms and Conditions, this Policy, or existing laws, rules, and regulations; 
As necessary or appropriate to protect the rights, property, and/or safety of us and our Marketing Partners, Related Parties, service providers, and any other third-party with whom we have a contractual relationship for commercial or business purposes; 
To maintain suppression or opt-out lists so that we won't contact users who have asked not to be contacted;

To augment Information by enhancing it with other data sources provided by our Marketing Partners, Related Parties, and service providers to enable us, for example, to gain deeper insights into our users; and 
To respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims, or when we determine it is necessary to comply with applicable laws and/or regulations.

HOW WE SHARE AND/OR SELL INFORMATION  
  

We may share and/or sell Information in the following ways:  
  

With our service providers (which include vendors and other third parties we contract with for business purposes), and/or our Marketing Partners in connection with marketing activities, including the delivery of email messaging, telemarketing calls, text/SMS messaging, and push notifications, provided that we have obtained TCPA Consent from such users to be contacted by telephone or text/SMS messaging and push notifications; 
With our interest-based Marketing Partners to create anonymized sets of Information which are made available for use by third-party Marketing Partners for programmatic advertising purposes; 
With our Related Parties to augment and verify the Information we collect and to develop and enhance their products and services; 
With one or more service providers who provide independent verification of consent, including verification of consent for purposes of the TSR and TCPA; 
To enable third parties, including our Marketing Partners and data and list management partners, to market products and services to you;

To enable our customer service vendors to perform their respective tasks, including for fulfillment of Contests (including our Identity Verification process); 
To enable our Information verification and fraud detection service providers to perform contracted-for services; and 
To submit users’ contact information to comment and petition campaigns run by governmental agencies, elected officials, or other parties where users have provided their express consent to endorse and be a part of the campaign including, in some instances, appending the user contact information with specific comment language.

When we share and/or sell Information, we enter into agreements that describe the purpose for which the Information is shared/sold, restrict its use to the agreement’s specified purpose, and require that all Information remain confidential and be protected from unauthorized disclosure.  

We may also share Information with applicable third parties as necessary if we become the subject of bankruptcy proceedings, or in connection with the sale, assignment, merger, or other transfer of all or a portion of our business. If we are involved in these types of transactions, we will notify users via email and via a Privacy Policy update on the Website regarding any material details pertaining to Information.   
  

SCRIPTS   
  

We use certain scripts provided by third-party service providers, such as those provided by Lead Intelligence, Inc. d/b/a Jornaya (“Jornaya”), ActiveProspect, Inc. (including its TrustedForm service) to independently document users’ consent to be contacted, including those users’ “prior express consent” has been provided as required by the Telephone Consumer Protection Act (47 USC § 227), and its implementing regulations adopted by the Federal Communications Commission (47 CFR § 64.1200), as amended from time-to-time (“TCPA”). These scripts are embedded on our website and collect the following information when users interact with the page(s) where the scripts are present: page URL, mouse movements and clicks, contact information inputted by the user, a snapshot of the page, including IP address of the user’s computer, time on the page, date and time that the script was loaded, as well as the date and time of the various user interactions with the page, and HTTP headers from the user’s browser. For more information about the data usage, retention and collection policies and practices of these third-party service providers, please click on the links located below:

ActiveProspect Trusted Form Script. Privacy Policy: https://activeprospect.com/privacy-policy
Jornaya’s Script. Privacy Policy: https://www.jornaya.com/consumer-privacy-policy/

MINORS   
  

The Websites are designed to comply with the Children's Online Privacy Protection Act (“COPPA”) and other laws protecting children’s privacy. In compliance with COPPA, we do not knowingly collect or retain Information from children under the age of 13 and any minor under the age of 13 is not permitted to claim Contests. If you are a parent or guardian of a child under 13 years of age and you think your child has given us Information, you can email us at [email protected]) In compliance with the CCPA, we do not knowingly sell or share Information of users under the age of 16 for any commercial purpose.  

COOKIES, INTEREST-BASED ADVERTISING, AND THIRD-PARTY ANALYTICS  
  

Our website uses Cookies to determine whether users have previously visited the Website and to streamline the registration process so, for example, users don’t have to re-enter their basic registration information when they return to the Website. We may also use Cookies to enhance a user’s experience while on the Website. Some of our third-party Marketing Partners may place Cookies on the Website to track users’ online behavior while on the Website and after they leave the Website. These third-party Cookies may enable the delivery of interest-based advertisements (to find out more about Cookies, visit https://www.networkadvertising.org/understanding-online-advertising/glossary/) based on a user’s visit to the Website and/or other websites. In addition, our Marketing Partners use Information gathered in this manner to recognize users across different channels and platforms, including computers, mobile devices, and Smart TVs. Our Marketing Partners may use this information over time for advertising, analytics, attribution, and reporting purposes.   

We may use Google Analytics and similar tools provided by our third-party partners to help analyze how users interact with the Website and to display customized ads and other content to our users during a current browsing session or in the future when the user is online. These analytics are performed by using the technological means described above to monitor a user’s interactions with the Website and do not involve the collection of any additional Information.  
  

Most browsers are initially set up to accept Cookies, but users can reset their Internet browsers to refuse all Cookies or to indicate when a Cookie is being sent or to refused online tracking. To disable and reject certain Cookies, follow the instructions associated with your Internet browser. In general, when a “do-not-track” setting is active, the user’s browser notifies other websites that the user does not want their Information and online behavior to be tracked and used, for example, for interest-based advertising. As required under some state laws, we are required to inform users that, as is the case with most websites, we generally do not honor or alter our behavior when a user to one of the Websites has activated the "do-not-track" setting on their browser. The exception to this is in the case of California consumers, where, in compliance with the CCPA, we will honor any opt-out preference signals they set on applicable browsers.   
  

Even where you reject a Cookie, you may still use the Website, but your ability to use certain features or offerings may be impaired. For example, if you return to the Website, you may have to re-enter Information you previously supplied to us. We may retain Cookie data indefinitely.  

Users may opt-out from interest-based advertising delivered to their web browser by companies who have elected to participate in one of the interest-based advertising opt-out mechanisms such as the Digital Adverting Alliance’s opt-out program located here or the National Advertising Institute’s opt-out program located here. Users may also choose to opt-out of interest-based advertising on their mobile devices. For more information, please click here. Please note that opting out of interest-based advertising does not mean you will no longer see advertising online. Rather, it means that the company or companies from which you opt-out will no longer show ads that have been tailored to your interests.  
  

OPTING-OUT FROM MARKETING  
  

Users may opt-out from receiving future contact from us via the following ways:  

Email Opt-Out. To opt-out from email marketing and to remove your anonymized data from programmatic advertising enabled by contacting customer service, click the “Unsubscribe” link on the bottom of every page or email us at [email protected]
TCPA Consent Opt-Out. Providing TCPA Consent is not required to qualify for a Contest. You may continue to use all other aspects of the Website, regardless of whether you elect to provide TCPA Consent. Users who elected to provide TCPA Consent but later wish to revoke it can opt out from future telemarketing calls by following prompts to stop individual telemarketing calls on recorded calls, by informing calling parties that they wish to be placed on their do not call list, or by contacting, as appropriate, the Marketing Partner(s) or our customer service team by email at [email protected]
The Terms & Conditions also contain guidance for opting out from telemarketing; 
[email protected]; 
Push Notification Opt-Out. To opt-out of browser-based push notifications, disable the notifications at the time you receive the notification or disable notifications through your browser’s settings; and

Targeting Advertising Opt-Out. To-opt out of Cookies, interest-based advertising and/or third-party analytics, see the section above. California consumers may also set an opt-out preference signal on applicable browsers.

OPTING OUT OF SHARING/SALE OF INFORMATION  

To opt-out of the sharing/sale of your Information click on the “Do Not Sell My Personal Info” link on the bottom of the Website page(s) that you have visited and/or provided Information to and complete the form. You can also send an email to [email protected], stating that you want to opt-out of the sale and sharing of your Information. We do not require a verification process to opt-out, but we reserve the right to confirm this request by sending you an email containing a final “Do Not Sell My Personal Info” link and requesting that you to respond to the email. Please note that it may take us several days to process an opt-out request. In compliance with the CCPA, we will honor any opt-out preference signals California consumers set on their applicable browsers.  

 
POLICY AGAINST SPAM 

We require that all emails promoting the Websites are sent only to users who have agreed to receive such emails. We prohibit any advertising of the Websites using unsolicited “spam” emails. If an advertiser or other person advertising or promoting our Sites fails to comply with our “no spam” policy, we will take appropriate disciplinary action against such person up to and including terminating our agreement with such person. If you feel you’ve been sent unsolicited spam emails promoting a Website and would like to register a complaint, please let us know by emailing us at [email protected] . We will immediately investigate all allegations of spam email and take appropriate action. 

ACCESSING, CORRECTING, AND DELETING YOUR INFORMATION  
  

Users who provide Information to us may contact us at [email protected] to correct their Information, request their Information be deleted, and/or access what Information we have collected, processed, and shared/sold. We will respond to user requests within forty-five (45) days. If you request deletion of your Information, please note that your Information will be suppressed from further use as described in this Policy. However, please remember that if we have already shared your Information with our third-party Marketing Partners, you will need to contact those Marketing Partners individually to have them suppress or delete your Information. Note that we may retain and use your Information as necessary to comply with our policies including legal obligations, dispute resolution, and enforcement of our agreements.  
  

When you make a request regarding accessing, correcting, or deleting your Information, we will ask individual users to identify themselves and the Information requested to be accessed, corrected, or deleted before processing such requests. To the extent permitted by applicable law, we may decline to process requests that we are unable to verify, are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, or would be extremely impractical (for instance, requests concerning Information residing on archive servers).  

Please refer to the U.S. State Law Rights and Disclosures section of this Privacy Policy for additional information on privacy rights for consumers in certain states.  

HEALTH AND WELLNESS INFORMATION  
  

Our surveys may ask health and wellness-related questions. We may share your responses with our third-party Marketing Partners who advertise health and wellness-related products and services on the Website, or who otherwise promote health and wellness-related products or services. We may also use this Information to display offers for health and wellness-related products and services to you. With your consent, we may provide Information to these providers so they can contact you. If you do not wish to share health and wellness-related Information, do not answer the health and wellness-related survey questions and do not provide TCPA Consent.   

FINANCIAL INFORMATION  
  

Our surveys may ask questions related to your financial status. We may share your responses with our third-party Marketing Partners who advertise finance-related products and services on the Website, or who otherwise promote finance-related products or services. We may also use this Information to display offers for finance-related products and services to you. With your consent, we may provide this Information to providers so they can contact you. If you do not wish to share this Information, do not answer the finance-related survey questions and do not provide TCPA Consent.   
  

MEDICARE SUPPLEMENT PLANS DISCLOSURE  
  

Some of our Marketing Partners offer Medicare Supplement plans. Medicare Supplement plans are not connected with or endorsed by the U.S. Government or the Federal Medicare program. Our Marketing Partners have confirmed to us that all related optional marketing on the Website comply with applicable Federal civil rights laws and do not discriminate on the basis of race, color, national origin, age, disability, or sex. With your consent, we may provide Information to Medicare Supplement providers so they can contact you. If you do not wish us to share your Information, do not provide consent to telemarketing.   
  

THIRD-PARTY SITES  
  

Our Website contains links to other sites or services. When you link from the Website to a third-party site (such as when you link from a survey question, optional marketing offer, or Deal advertisement to another site), you are leaving the Website and are subject to the privacy policies and terms and conditions of those sites – NOT this Privacy Policy. We are not responsible for the privacy practices, content, or security of such third-party sites.   

SECURITY OF YOUR INFORMATION  

  
We use commercially reasonable efforts to prevent unauthorized access, disclosure, or accidental loss or destruction of your Information. Access to your Information is strictly limited and we take reasonable measures to ensure that your Information is not accessible to the public. We restrict access to users’ Information to only those persons who need access to perform or provide their job or service, both internally and with our third-party service providers. Information is encrypted with advanced TLS (Transport Layer Security) when collected, stored, and/or transmitted.  
  

While we have endeavored to create a secure and reliable Website for users, we are not able to fully eliminate security risks associated with Information. Given the nature of the Internet, your Information passes through entities that we are unable to control. Therefore, we cannot guarantee that our security measures or those of third parties who access or transmit your Information will prevent your Information from being improperly accessed, stolen, or altered. In compliance with applicable federal and state laws, we shall notify you and any applicable regulatory agencies if we learn of an information security breach of your Information. You will be notified via email in the event of such a breach. Please be advised that notice may be delayed in order to address the needs of law enforcement, determine the scope of network damage, and to engage in remedial measures.  
  

BIOMETRIC DATA   

Biometric Data is any information based on a biometric identifier used to identify an individual, including scans of facial geometry. As part of the Contests claims process, we ask your consent to use Biometric Data to verify your identity by uploading an image of your government-issued identification document and a photographic image or brief live video (often called a “selfie”) from your mobile phone or other device. We use these images to create facial geometry recognition or a “faceprint,” which we use to verify your identity (“Identify Verification” or “Face Verification”). We collect and process your Biometric Data only for the following purposes:   

To verify your identity when you submit a claim for a contest; and  
To prevent fraudulent uses of our Website or the creation of multiple accounts.

We will never sell, rent, or trade your Biometric Data. Biometric Data is decentralized and hosted securely. We implement security measures such as encryption, firewalls, and intrusion detection and prevention systems. We permanently delete and destroy your Biometric Data six (6) months after submission. You may also request that your Biometric Data be deleted any time after it has been submitted for Identity Verification.  

You may refuse to consent to the collection and processing of your Biometric Data. If you choose not to consent, we will provide you with alternate options for verifying your identity.   

  
U.S. STATE LAW RIGHTS AND DISCLOSURES  

Some U.S. states have enacted laws that provide statutory rights to consumers in their state. The information below describes those rights and how you can exercise them.  

NOTICE AT COLLECTION   
  

This Policy provides timely notice to users, including those who are California residents and fall within the definition of “consumers” as provided for in the California Consumer Privacy Act (“CCPA”), that we collect Information at or before collection.   

In the chart below, we set forth the categories of Information we collect from users and which categories of Information we share. We collect these categories of Information for the following purposes: to provide you with information about Contests and other content and products and/or services that we believe may be of interest to you, including sending you communications that you have consented to receive; for website operations, content improvements, testing, research, analysis, and product development; to verify whether users are entitled to participate in the Contests Program and, if so, to fulfill Contests; to provide users with customer service and respond to customer inquiries; to carry out our obligations and enforce our rights arising from any contracts entered into between users and us, and any inquiry into whether the user has provided express written consent where required under applicable law; to detect, investigate, and respond to any fraudulent or malicious activity or any other activity we determine is or may be a violation of our Terms and Conditions, this Policy, or existing laws, rules, and regulations; as necessary or appropriate to protect the rights, property, and/or safety of us and our Marketing Partners, Related Parties, service providers, and any other third-party with whom we have a contractual relationship for commercial or business purposes; to maintain suppression or opt-out lists so that we won't contact users who have asked not to be contacted; to augment Information by enhancing it with other data sources provided by our Marketing Partners, Related Parties, and service providers to enable us (for example, to gain deeper insights into our users); and to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims, or when we determine it is necessary to comply with applicable laws and/or regulations. We will retain your Information unless you exercise your data privacy rights for so long as we need to protect us from claims related to your interactions with us. For Identity Verification, the Information is retained no longer than six (6) months after submission.   

We do not knowingly sell or share Information of users under the age of sixteen (16) years for any commercial purpose.   
 

Category	Sold/Shared?
Identifiers (such as real name, alias, postal, email and/or IP addresses, telephone numbers, birth date, and government-issued identification cards)	Yes, for the business and commercial purposes, with the exception of government-issued identification cards, which are shared only for the business purpose of Identity Verification
Personal information (such as the Identifiers listed above, gender, education, employment, employment history, financial information, home or automobile ownership, medical and health information, and insurance-related, including Medicare, information) and which may include Information that is a protected classification characteristic under state and/or federal law) and/or sensitive personal information under state law, including the CCPA (for example, government-issued identification cards, race and/or ethnic origin, physical or mental disability, or sexual orientation)	Yes, for business and commercial purposes
Commercial information (including preferences, products or services purchased, obtained, or considered, or other purchasing data)
Internet or similar network activity (such as browsing and search history and information about a consumer's interaction with a website, application, or advertisement) information available from Internet activity (such as device types, user agent data, referring URLs, and IP addresses)
Inferences drawn from other categories of Information (for example, a profile reflecting a person’s preferences, characteristics, psychological trends and attitudes.
Information related to a user’s consent to receive telemarketing calls, SMS messaging, push notifications, commercial email, and other forms of communication (which may include the creation of a report and visual playback of a user responding to one or more survey questions and interacting with the page that seeks to obtain a user's “prior express written consent” (as defined in the Telephone Consumer Protection Act (“TCPA”) (“TCPA Consent”)	Yes, for business purposes
Biometric data, in the form of uploading a government-issued identification card and a selfie or a live video	This Information is shared only for the business purpose of Identity Verification for a Contest winner to claim their prize.

Please see the Rights of California Consumers section of this Privacy Policy immediately below to learn about California consumer privacy rights and how to exercise those rights. This includes the right to know the Information we have collected and sold, the right to opt-out from the sale or sharing of Information, and the right to correct or delete your Information.  

RIGHTS OF CALIFORNIA CONSUMERS  
  

California consumers have rights under the CCPA regarding their Information. These rights are:  

Right to Know. The right to know what Information we have collected, including the categories of Information, the source of collection, our purpose for collecting the Information, the categories of third parties with whom we disclose, share or sell that Information and for what reason, and the specific pieces of Information we have collected about you.  
Right to Delete. The right to request that we delete the Information about you that we have collected. Note that there are certain exceptions to this right, including when the Information is necessary to provide you with goods or services you requested, to prevent fraud, and to comply with our legal obligations.   
Right to Correct. The right to request that we correct inaccurate Information that we maintain about you. 
Right to Opt-Out of Sale/Sharing. The right to limit or opt-out from the sale or sharing of Information.

Right to Opt-Out of Sale/Sharing of Sensitive Information. The right to limit or opt out from the sale or sharing of sensitive Information, as defined under the CCPA. Note that there are certain exceptions to this right, including when the Information is necessary to provide you with goods or services you requested, to prevent fraud, and ensure safety and security. 
Right to Non-Discrimination. The right not to receive discriminatory treatment for exercising your privacy rights.

How to Exercise Your Rights  

To exercise your CCPA rights, click on the “Do Not Sell My Personal Info” link on the bottom of the Website page where we collect Information, or send an email to [email protected].   

Verification Process. We require a verification process for requests to access, correct, or delete Information in order to prevent an unauthorized third-party from accessing or making decisions regarding a user’s Information. Generally, we will verify a request by matching the identifying information supplied by the user with the Information we already have for the user. If we cannot verify the user using the foregoing method, we may request additional information, such as a government-issued identification card, which we will not retain or use for any other purpose.  
  
Use of an Authorized Agent. California consumers may also designate an authorized agent to make these requests on their behalf. You must provide written authorization to the authorized agent that they are authorized to act on your behalf. When contacting us, the agent must submit proof of that authorization. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued identification card, to verify your identity before processing your request to protect your Information.   

Timing. We will confirm receipt of your request within ten (10) business days. For all verifiable consumer requests, we strive to respond within forty-five (45) days of receipt. If we require additional time, which can be up to ninety (90) days in the aggregate, we will provide written notice. Any disclosures we provide will be delivered electronically in a secure fashion. If, for some reason, we cannot fulfill or comply with your request, our response will explain that decision.   

How We Handle Deletion Requests After Verification. Once we receive and confirm your request to delete, we will delete or de-identify (and direct our service providers, vendors, and other applicable third parties to delete) your Information from our system other than from our archive servers (which we maintain for compliance purposes), unless there is an applicable exception. If we do not comply with a deletion request, we will provide you with grounds for the denial in writing. Note that after a deletion request, we may retain and use your Information for the limited purpose of complying with our policies, including this Policy, and to comply with applicable laws.   

Disclosure of Information Collected and Sold. Once we receive and confirm your verifiable consumer request to access your Information, we will disclose to you the following:  

The categories and sources of Information collected; 
Our business and commercial purposes for collecting and selling that Information; 
The categories of third parties with whom we shared that Information; 
The specific pieces of Information collected; 
If we sold or disclosed your Information for a business purpose, we will disclose:

For sales - the Information categories for each category sold and the categories of third parties to whom the Information was sold; and 
For disclosures - the Information categories for each category disclosed and the categories of third parties to whom the Information was disclosed.

Notice of Right to Opt-Out of the Sale or Sharing of Your Information   

California consumers have the right to opt-out from the sale or sharing of their Information, including the sale of sharing of any sensitive Information. We provide a “Do Not Sell My Personal Info” link on each Website page where we collect Information that links to an online request form. You can access the form here or you can send an email to [email protected] and elect to opt-out from the sale of your Information. We do not require a verification process to opt-out, but we reserve the right to confirm your request by sending you an email and requesting that you respond to the email.   
  

While our agreements with third parties to whom we sell or disclose Information prohibit the further sale or use beyond the scope of our agreement with them, if we have sold or shared a California consumer’s Information after an opt-out request is submitted but before we have complied with the opt-out, we will, where possible, notify all third parties to whom we have sold or shared a California consumer’s Information to comply with the opt-out request. If the user requests a transaction with us that requires the sale of their Information, we will inform them that they have opted out and if they want to proceed with the transaction, we will offer the opportunity to opt-in.  

Notice of Right to Limit Sensitive Personal Information  

Under the CCPA, “Sensitive Personal Information” includes non-public information that reveals a consumer’s social security, driver’s license, state identification card, or passport number, a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, a consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership, Information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation, and Biometric Data. As noted in the Categories of Information We Collect section above, we do collect, use, share, and sell Information defined as Sensitive Personal Information under the CCPA.  

Identity Verification Information Used Only to Fulfill Contests. To verify your eligibility for Contests, we ask your consent to use Biometric Data to verify your identity as part of the claims process by uploading a government-issue identification card and selfie or live video. Biometric Data is used only for our Identity Verification process and fraud prevention. Biometric Data is stored for no longer than six (6) months. You can request that it be deleted at any time after submission. It is not sold or shared with any third-party for any commercial purpose. If you do not consent to the collection of your Biometric Data, we will provide you with an alternative method for Identity Verification.   

You do not need to provide us with any Sensitive Personal Information (other than Identity Verification) in order to claim Contests. However, due to the nature of our business, once you provide us with Sensitive Personal Information, we are unable to separate Sensitive Personal Information from other Information (with the exception of Biometric Data for Identity Verification, which is always kept segregated and can be deleted at any point after it is submitted). If you would like to exercise your Right to Opt-Out of Selling/Sharing Sensitive Information, we will treat the request as a Right to Delete request. Click on the “Do Not Sell My Personal Info” link on the bottom of the Website page where we collect Information, or send an email to [email protected].   

Global Privacy Controls  
  

Certain browsers allow users to enable an opt-out preference signal in their browser settings (a “Global Privacy Control”). When a Global Privacy Control is enabled, it signals websites that the user visits that the user is automatically exercising their right to opt-out of the sale or sharing of their Information without the need, for example, of clicking on a “Do Not Sell My Information” link. Via our service provider, we have enabled acceptance of California users’ Global Privacy Control.   

Commitment to Nondiscrimination. We are committed to not discriminating against California consumers who exercise their CCPA rights. As such, unless otherwise permitted by the CCPA, we will not deny, charge you different prices or rates, or provide a different quality level of goods or services, including through granting discounts or other benefits, or imposing penalties, and/or suggest that you may receive a different price, rate, or quality level of goods or services. While we do not provide financial incentives for users who do not exercise their CCPA rights, please note that some of the functionality of the Website may be unavailable if consumers exercise their right to have their Information deleted.  

RIGHTS OF VIRGINIA, COLORADO, CONNECTICUT, MONTANA, TEXAS, OREGON, AND UTAH CONSUMERS 

Virginia, Colorado, Connecticut, Montana, Texas, Oregon, and Utah consumers have rights under the VCDPA, CPA, CTDPA, MTCDPA, TDSPA, OCPA, and UCPA, respectively, regarding their Information. These rights are: 

Right to Know. The right to know whether we are processing your Information.  
Right to Access. The right to access your Information we have processed.   
Right to Delete. The right to request that we delete the Information about you that we have collected.  
Right to Correct. The right to request that we correct inaccurate Information that we maintain about you (Virginia, Colorado, and Connecticut). 
The Right to Data Portability. The right to obtain a copy of your Information in a portable format.

Right to Opt-Out. The right to opt-out of targeted advertising, the sale of Information, and/or any automated processing performed on Information that evaluates, analyzes, or predicts personal aspects of the user (“profiling”).

How to Exercise Your Rights  

To exercise your statutory privacy rights, click on the “Do Not Sell My Personal Info” link on the bottom of the Website page where we collect Information, or send an email to [email protected]. Please note that if you wish to exercise the Right to Opt-Out, due to the nature of our business, we will treat the request as a Right to Delete request.   

Timing. If we have not taken action or deny your request to know, access, correct, delete or opt-out, you may appeal the decision within ninety (90) days by writing to us at [email protected]. Within sixty (60) days of receipt of this written appeal, we will inform you in writing of any actions taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.  

De-identified Data Disclosure. We may use de-identified data in some instances (data that cannot be linked to any identifiable natural person or any device linked to any such person). We maintain de-identified data without attempting to re-identify it, and any de-identified data that is sold or shared is not able to be re-identified.  

Commitment to Nondiscrimination. We are committed to not discriminating against consumers who exercise their privacy rights. As such, unless otherwise permitted by applicable law, we will not deny, charge you different prices or rates, or provide a different quality level of goods or services, including through granting discounts or other benefits, or imposing penalties, and/or suggest that you may receive a different price, rate, or quality level of goods or services. While we do not discriminate against users who exercise their rights, please note that some of the functionality of the Website may be unavailable if consumers exercise their right to have their Information deleted.  

OTHER STATE SPECIFIC PRIVACY RIGHTS  

Other U.S states grant their residents privacy rights, including, for example, in Nevada, where you have the right to opt-out of the sale of Information. To exercise your privacy rights, please submit your request by clicking on the link “Do Not Sell My Personal Info” or send an email to [email protected]. In your request, please specify that you want to exercise your rights and specify the Website that you visited and the email address you registered with. We may contact you to ask you for further information to help you exercise your rights. We will try to respond to requests within one month and we will let you know if we need to take longer, for example, because your request is complicated.   

QUESTIONS, SUGGESTIONS, OR TO CONTACT US  

If you have any questions, comments, complaints, or suggestions regarding this Policy or the Website, please contact at [email protected] 