Colorado Privacy Act (CPA) Compliance

Overview

The Colorado Privacy Act (CPA), effective July 1, 2023, provides Colorado residents with comprehensive privacy rights regarding their personal data. Kids on the Yard is committed to protecting the privacy of Colorado residents and complying with all CPA requirements.

What is the CPA?

The Colorado Privacy Act is a comprehensive privacy law that grants Colorado consumers fundamental rights regarding their personal data and requires businesses to implement responsible data protection practices. The law applies to businesses that conduct business in Colorado or produce products or services targeted to Colorado residents and meet certain data processing thresholds.

Your Rights Under the CPA

As a Colorado resident, you have the following rights under the CPA:

Right of Access

You have the right to confirm whether we are processing your personal data and to access such personal data. You may request:

• Categories of personal data we collect and process about you
• Purposes for processing your personal data
• Categories of sources from which personal data is collected
• Categories of third parties with whom we share personal data
• Specific pieces of personal data we have collected about you

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of processing.

Right to Delete

You have the right to delete personal data concerning you that we have collected, subject to certain exceptions including:

• Completing transactions or providing requested goods or services
• Complying with legal obligations
• Exercising free speech rights or ensuring others can exercise free speech rights
• Engaging in public or peer-reviewed scientific research in the public interest

Right to Data Portability

You have the right to obtain personal data concerning you in a portable and readily usable format that allows you to transmit the data to another business without hindrance.

Right to Opt-Out

You have the right to opt out of:

• Processing of personal data for purposes of targeted advertising
• Sale of personal data
• Profiling in furtherance of decisions that produce legal or similarly significant effects

How We Comply with CPA

Transparent Data Practices

Kids on the Yard complies with CPA through:

• Clear Privacy Notices - Providing accessible information about our data collection practices
• Purpose Limitation - Processing personal data only for disclosed, legitimate purposes
• Data Minimization - Limiting collection to what is adequate, relevant, and reasonably necessary
• Accuracy Maintenance - Keeping personal data accurate and current

Consumer Rights Implementation

We have established processes to:

• Verify Identity - Authenticate requests to prevent unauthorized access
• Respond Promptly - Process verified requests within 45 days
• Provide Access - Deliver requested information in accessible formats
• Enable Corrections - Allow updates to inaccurate personal data
• Process Deletions - Remove personal data when legally permissible
• Facilitate Portability - Provide data in portable formats when requested

Data Security and Protection

Our security measures include:

• Technical Safeguards - Encryption, access controls, secure data transmission
• Administrative Controls - Privacy training, data handling policies, incident response procedures
• Physical Security - Secure facilities, controlled access to data storage areas
• Regular Assessments - Ongoing evaluation and improvement of security practices

Categories of Personal Data We Process

Under the CPA, we collect and process the following categories of personal data from Colorado residents:

Personal Identifiers

• Name, email address, phone number, postal address
• Account usernames and encrypted passwords
• Government-issued identification numbers (when required)
• IP addresses and device identifiers

Educational and Professional Information

• Student academic records and progress data
• Learning assessments and performance metrics
• Educational goals and preferences
• Tutoring session recordings and notes

Financial Information

• Payment card information and billing addresses
• Transaction history and payment records
• Subscription and service plan details

Technical and Usage Data

• Device information and browser details
• Website and app usage patterns
• Service interaction logs and preferences
• Communication records with customer support

Purposes for Processing Personal Data

We process personal data for legitimate business purposes including:

Service Provision

• Delivering educational and tutoring services
• Creating and maintaining user accounts
• Processing payments and managing subscriptions
• Providing customer support and technical assistance

Business Operations

• Improving service quality and user experience
• Analyzing usage patterns and service performance
• Conducting research and development activities
• Managing business relationships and communications

Legal and Safety

• Complying with applicable laws and regulations
• Protecting against fraud, abuse, and security threats
• Enforcing terms of service and user agreements
• Responding to legal requests and court orders

Third-Party Data Sharing

We may share personal data with carefully selected third parties:

Service Providers

• Cloud storage and computing service providers
• Payment processing companies
• Customer support and communication platforms
• Analytics and performance monitoring services

Business Partners

• Educational content and curriculum providers
• Technology integration partners
• Marketing and advertising partners (with your consent)

Legal Requirements

• Law enforcement agencies (when legally required)
• Regulatory authorities and government agencies
• Legal counsel and professional advisors

We do not sell personal data to third parties for monetary consideration.

How to Exercise Your CPA Rights

Colorado residents may exercise their privacy rights through the following methods:

Submit a Request

• Online Portal: Visit our Privacy Request Center
• Email: Send requests to [email protected] with "CPA Request" in the subject line
• Phone: Call our privacy hotline at International: +1 786-382-2000

Required Information

To process your request efficiently, please provide:

• Your full name and contact information
• Email address associated with your account
• Proof of Colorado residency
• Specific nature of your request
• Any additional details to help us locate your data

Response Timeline

• Acknowledgment: We will confirm receipt within 10 business days
• Response: We will respond to verified requests within 45 days
• Extensions: Complex requests may require up to 90 days with advance notice
• No Charge: We provide up to two responses per year at no cost

Appeal Process

If you are not satisfied with our response to your privacy request, you have the right to appeal:

1. Contact Us: Email [email protected] with "CPA Appeal" in the subject line
2. Provide Details: Include your original request reference and reason for appeal
3. Review Period: We will review and respond to appeals within 60 days
4. External Review: If unsatisfied, you may contact the Colorado Attorney General

Contact Information

For questions about our CPA compliance or to exercise your rights:

Privacy Team Kids on the Yard Limitless Virtue LLC 9701 NE 2nd Ave, Suite #1069 Miami Shores, Florida 33138 U.S.A Email: [email protected] Phone: International: +1 786-382-2000

Last Updated: January 1, 2025

For more information about the Colorado Privacy Act, visit: https://coag.gov/resources/colorado-privacy-act/