Virginia Consumer Data Protection Act (VCDPA) Compliance

Overview

The Virginia Consumer Data Protection Act (VCDPA), effective January 1, 2023, provides Virginia residents with important rights regarding their personal data. Kids on the Yard is committed to protecting the privacy of Virginia residents and complying with all VCDPA requirements.

What is the VCDPA?

The VCDPA is Virginia's comprehensive consumer data protection law that grants Virginia consumers fundamental privacy rights and requires businesses to be transparent about their data collection and processing practices. The law applies to businesses that conduct business in Virginia or produce products or services targeted to Virginia residents.

Your Rights Under the VCDPA

As a Virginia resident, you have the following rights under the VCDPA:

Right to Access

You have the right to confirm whether we are processing your personal data and to access such personal data. You may request:

• The categories of personal data we collect about you
• The purposes for processing your personal data
• The categories of third parties with whom we share personal data
• The specific pieces of personal data we have collected about you

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes for processing.

Right to Delete

You have the right to request deletion of personal data provided by or obtained about you, subject to certain exceptions for legal compliance, fraud prevention, and other legitimate purposes.

Right to Data Portability

You have the right to obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business.

Right to Opt-Out

You have the right to opt out of:

• The processing of personal data for purposes of targeted advertising
• The sale of personal data
• Profiling in furtherance of decisions that produce legal or similarly significant effects

How We Comply with VCDPA

Data Collection Transparency

Kids on the Yard complies with VCDPA by:

• Providing clear notice of our data collection practices
• Explaining the purposes for which we process personal data
• Identifying categories of personal data we collect
• Disclosing third parties with whom we share data

Consumer Request Processing

We have established procedures to:

• Authenticate consumer identity before processing requests
• Respond to requests within 45 days (with possible 45-day extension)
• Provide requested information without charge twice per year
• Offer alternative means of communication for responses

Data Security Measures

We implement appropriate administrative, technical, and physical safeguards to:

• Protect personal data against unauthorized access
• Maintain data confidentiality, integrity, and availability
• Regularly assess and update security measures
• Train employees on data protection requirements

Privacy-by-Design

Our approach includes:

• Minimizing data collection to what is necessary for stated purposes
• Implementing data retention policies with defined deletion schedules
• Regular privacy impact assessments for new processing activities
• Clear consent mechanisms for data collection and use

Categories of Personal Data We Process

Under the VCDPA, we may collect and process the following categories of personal data from Virginia residents:

1. Contact Information - Name, email address, phone number, mailing address
2. Account Information - Username, password, account preferences
3. Educational Information - Student progress, learning assessments, tutoring records
4. Payment Information - Billing address, payment method details
5. Technical Information - IP address, device identifiers, browser information
6. Usage Information - Service interactions, session recordings, support communications
7. Communication Data - Messages, feedback, customer service interactions

Purposes for Processing Personal Data

We process personal data for the following purposes:

• Service Delivery - Providing educational services and tutoring
• Account Management - Creating and maintaining user accounts
• Communication - Customer support, service notifications, updates
• Payment Processing - Billing and payment collection
• Service Improvement - Analyzing usage patterns and service quality
• Legal Compliance - Meeting regulatory and legal obligations
• Safety and Security - Protecting against fraud and ensuring platform security

Third-Party Data Sharing

We may share personal data with:

• Service Providers - Companies that help us deliver our services
• Payment Processors - To handle billing and payment transactions
• Educational Partners - For curriculum development and service enhancement
• Legal Authorities - When required by law or to protect rights and safety

We do not sell personal data for monetary consideration.

How to Exercise Your VCDPA Rights

To exercise your rights under the VCDPA, Virginia residents may:

Submit a Request

• Visit our Privacy Request Portal
• Email us at [email protected] with "VCDPA Request" in the subject line
• Call our privacy hotline at International: +1 786-382-2000

Information Required

To process your request, we may need:

• Your full name and email address associated with your account
• Proof of Virginia residency
• Specific details about your request
• Additional verification information as needed

Response Process

• We will acknowledge receipt of your request within 10 business days
• We will respond to verified requests within 45 days
• Complex requests may require up to 90 days with advance notice
• There is no charge for up to two requests per year

Appeals Process

If you are not satisfied with our response to your privacy request, you have the right to appeal by:

1. Contacting us at [email protected] with "VCDPA Appeal" in the subject line
2. Including your original request reference number
3. Explaining the basis for your appeal

We will respond to appeals within 60 days. If we deny your appeal, you may contact the Virginia Attorney General to submit a complaint.

Contact Information

For questions about our VCDPA compliance or to exercise your rights:

Privacy Team Kids on the Yard Limitless Virtue LLC 9701 NE 2nd Ave, Suite #1069 Miami Shores, Florida 33138 U.S.A Email: [email protected] Phone: International: +1 786-382-2000

Last Updated: January 1, 2025

For more information about the VCDPA, visit the Virginia Attorney General's website at https://www.oag.state.va.us/consumer-protection/index.php/privacy.