Colorado Privacy Act (CPA) Compliance

Overview

The Colorado Privacy Act (CPA), effective July 1, 2023, provides Colorado residents with comprehensive privacy rights regarding their personal data. Kids on the Yard is committed to protecting the privacy of Colorado residents and complying with all CPA requirements.

Applicability to Kids on the Yard

Kids on the Yard is operated by Limitless Virtue LLC, a Florida limited liability company headquartered in Miami Shores, Florida. Based on the applicability criteria of the Colorado Privacy Act (CPA) described above, Kids on the Yard does not currently meet the criteria for direct application of this law, as the law's consumer-volume and data-sale thresholds are not currently met.

Although Kids on the Yard is not directly subject to the Colorado Privacy Act (CPA) as a matter of statutory obligation, we have voluntarily adopted the rights, disclosures, and practices described on this page as a matter of best practice and out of respect for the privacy expectations of our families. The rights described above are honored by Kids on the Yard regardless of statutory applicability, through the contact procedures listed below.

If Kids on the Yard's circumstances change such that the Colorado Privacy Act (CPA) does directly apply, the obligations described here will become legally binding rather than voluntary, and this section will be updated accordingly. Nothing in this voluntary framework limits or waives any rights you may have under the Colorado Privacy Act (CPA) in the event the law does directly apply to Kids on the Yard.

What is the CPA?

The Colorado Privacy Act is a comprehensive privacy law that grants Colorado consumers fundamental rights regarding their personal data and requires businesses to implement responsible data protection practices. The law applies to businesses that conduct business in Colorado or produce products or services targeted to Colorado residents and meet certain data processing thresholds.

Your Rights Under the CPA

As a Colorado resident, you have the following rights under the CPA:

Right of Access

You have the right to confirm whether we are processing your personal data and to access such personal data. You may request:

• Categories of personal data we collect and process about you
• Purposes for processing your personal data
• Categories of sources from which personal data is collected
• Categories of third parties with whom we share personal data
• Specific pieces of personal data we have collected about you

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of processing.

Right to Delete

You have the right to delete personal data concerning you that we have collected, subject to certain exceptions including:

• Completing transactions or providing requested goods or services
• Complying with legal obligations
• Exercising free speech rights or ensuring others can exercise free speech rights
• Engaging in public or peer-reviewed scientific research in the public interest

Right to Data Portability

You have the right to obtain personal data concerning you in a portable and readily usable format that allows you to transmit the data to another business without hindrance.

Right to Opt-Out

You have the right to opt out of:

• Processing of personal data for purposes of targeted advertising
• Sale of personal data
• Profiling in furtherance of decisions that produce legal or similarly significant effects

How We Comply with CPA

Transparent Data Practices

Kids on the Yard complies with CPA through:

• Clear Privacy Notices - Providing accessible information about our data collection practices
• Purpose Limitation - Processing personal data only for disclosed, legitimate purposes
• Data Minimization - Limiting collection to what is adequate, relevant, and reasonably necessary
• Accuracy Maintenance - Keeping personal data accurate and current

Consumer Rights Implementation

We have established processes to:

• Verify Identity - Authenticate requests to prevent unauthorized access
• Respond Promptly - Process verified requests within 45 days
• Provide Access - Deliver requested information in accessible formats
• Enable Corrections - Allow updates to inaccurate personal data
• Process Deletions - Remove personal data when legally permissible
• Facilitate Portability - Provide data in portable formats when requested

Data Security and Protection

Our security measures include:

• Technical Safeguards - Encryption, access controls, secure data transmission
• Administrative Controls - Privacy training, data handling policies, incident response procedures
• Physical Security - Secure facilities, controlled access to data storage areas
• Regular Assessments - Ongoing evaluation and improvement of security practices

Categories of Personal Data We Process

Under the CPA, we collect and process the following categories of personal data from Colorado residents:

Personal Identifiers

• Name, email address, phone number, postal address
• Account usernames and encrypted passwords
• Government-issued identification numbers (when required)
• IP addresses and device identifiers

Educational and Professional Information

• Student academic records and progress data
• Learning assessments and performance metrics
• Educational goals and preferences
• Tutoring session recordings and notes

Financial Information

• Payment card information and billing addresses
• Transaction history and payment records
• Subscription and service plan details

Technical and Usage Data

• Device information and browser details
• Website and app usage patterns
• Service interaction logs and preferences
• Communication records with customer support

Purposes for Processing Personal Data

We process personal data for legitimate business purposes including:

Service Provision

• Delivering educational and tutoring services
• Creating and maintaining user accounts
• Processing payments and managing subscriptions
• Providing customer support and technical assistance

Business Operations

• Improving service quality and user experience
• Analyzing usage patterns and service performance
• Conducting research and development activities
• Managing business relationships and communications

Legal and Safety

• Complying with applicable laws and regulations
• Protecting against fraud, abuse, and security threats
• Enforcing terms of service and user agreements
• Responding to legal requests and court orders

Third-Party Data Sharing

We may share personal data with carefully selected third parties:

Service Providers

• Cloud storage and computing service providers
• Payment processing companies
• Customer support and communication platforms
• Analytics and performance monitoring services

Business Partners

• Educational content and curriculum providers
• Technology integration partners
• Marketing and advertising partners (with your consent)

Legal Requirements

• Law enforcement agencies (when legally required)
• Regulatory authorities and government agencies
• Legal counsel and professional advisors

We do not sell personal data to third parties for monetary consideration.

How to Exercise Your CPA Rights

Colorado residents may exercise their privacy rights through the following methods:

Submit a Request

• Online Portal: Visit our Privacy Request Center
• Email: Send requests to [email protected] with "CPA Request" in the subject line

Required Information

To process your request efficiently, please provide:

• Your full name and contact information
• Email address associated with your account
• Proof of Colorado residency
• Specific nature of your request
• Any additional details to help us locate your data

Response Timeline

• Acknowledgment: We will confirm receipt within 10 business days
• Response: We will respond to verified requests within 45 days
• Extensions: Complex requests may require up to 90 days with advance notice
• No Charge: We provide up to two responses per year at no cost

Appeal Process

If you are not satisfied with our response to your privacy request, you have the right to appeal:

1. Contact Us: Email [email protected] with "CPA Appeal" in the subject line
2. Provide Details: Include your original request reference and reason for appeal
3. Review Period: We will review and respond to appeals within 60 days
4. External Review: If unsatisfied, you may contact the Colorado Attorney General

Contact Information

For questions about our CPA compliance or to exercise your rights:

Privacy Team Kids on the Yard Limitless Virtue LLC 9701 NE 2nd Ave, Suite #1069 Miami Shores, Florida 33138 U.S.A Email: [email protected] Phone: International: +1 786-382-2000

Automated Decision-Making and AI

Under the Colorado Privacy Act, you have rights regarding automated decision-making and profiling.

Right to Opt-Out of Profiling

You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

AI in Our Services

Kids on the Yard may use AI and automated processing for:

• Personalizing educational recommendations
• Assisting with content creation (with human review)
• Optimizing service delivery and scheduling
• Analyzing learning patterns to improve educational outcomes

Your Rights

• You can request information about automated decision-making affecting you
• You can opt-out of profiling for decisions with significant effects
• You can request human review of automated decisions

For more information, see our AI Disclosure Policy.

Last Updated: January 1, 2026

For more information about the Colorado Privacy Act, visit: https://coag.gov/resources/colorado-privacy-act/