Utah Consumer Privacy Act (UCPA) Compliance

Overview

The Utah Consumer Privacy Act (UCPA), effective December 31, 2023, provides Utah residents with fundamental privacy rights regarding their personal data. Kids on the Yard is committed to protecting the privacy of Utah residents and complying with all UCPA requirements.

What is the UCPA?

The Utah Consumer Privacy Act is a comprehensive privacy law that grants Utah consumers important rights regarding their personal data and requires businesses to implement responsible data protection practices. The law applies to businesses that conduct business in Utah or produce products or services targeted to Utah residents and meet specific data processing thresholds.

Your Rights Under the UCPA

As a Utah resident, you have the following rights under the UCPA:

Right to Access

You have the right to confirm whether we are processing your personal data and to access such personal data. This includes the right to obtain:

• Categories of personal data we collect about you
• Purposes for processing your personal data
• Categories of sources from which personal data is collected
• Categories of third parties with whom we share personal data
• Specific pieces of personal data we have collected about you

Right to Delete

You have the right to delete personal data concerning you that we have collected from you, subject to certain exceptions including:

• Completing the transaction for which personal data was collected
• Complying with legal obligations
• Exercising free speech rights or ensuring others can exercise free speech rights
• Engaging in public or peer-reviewed scientific research in the public interest

Right to Data Portability

You have the right to obtain your personal data in a portable and readily usable format that allows you to transmit the data to another business without hindrance from us, where technically feasible.

Right to Opt-Out

You have the right to opt out of:

• Processing of personal data for purposes of targeted advertising
• Sale of personal data to third parties
• Profiling in furtherance of decisions that produce legal or similarly significant effects

How We Comply with UCPA

Transparent Data Practices

Kids on the Yard complies with UCPA through:

Data Collection Transparency

• Clear Privacy Notice: We provide accessible information about our data collection practices
• Purpose Specification: We clearly explain why we collect and process personal data
• Data Categories: We identify the types of personal data we collect
• Third-Party Sharing: We disclose who we share data with and why

Consumer Rights Implementation

We have established processes to:

• Identity Verification: Authenticate requests to prevent unauthorized access to personal data
• Timely Response: Process verified consumer requests within 45 days
• Accessible Formats: Provide requested information in clear, understandable formats
• No Discrimination: Ensure no adverse treatment for exercising privacy rights

Data Protection Measures

• Technical Safeguards: Encryption, access controls, secure data transmission protocols
• Administrative Controls: Privacy training, data handling procedures, breach response plans
• Physical Security: Controlled access to facilities and data storage systems
• Regular Assessments: Ongoing evaluation and improvement of security practices

Categories of Personal Data We Process

Under the UCPA, we collect and process the following categories of personal data from Utah residents:

Personal Identifiers

• Full name, email addresses, phone numbers, mailing addresses
• Account credentials and security information
• Government-issued identification (when legally required)
• Device identifiers and IP addresses

Educational and Academic Information

• Student records, academic performance, and progress tracking
• Learning assessments and educational goals
• Tutoring session notes and recommendations
• Parent/guardian communications about student progress

Financial Information

• Payment card information and billing addresses
• Transaction histories and subscription details
• Refund and billing dispute information
• Financial assistance and scholarship data

Technical and Usage Information

• Device information, browser characteristics, and operating system details
• Website usage patterns and service interaction data
• Customer support communications and feedback
• Platform preferences and settings

Communication Records

• Email correspondence and chat conversations
• Phone call records with customer service
• Survey responses and feedback submissions
• Marketing communication preferences

Third-Party Data Sharing

We may share personal data with selected third parties for legitimate business purposes:

Service Providers

• Cloud hosting and data storage providers
• Payment processing companies and financial institutions
• Customer support and communication platforms
• Educational content and curriculum providers

Business Partners

• Technology integration and platform partners
• Analytics and performance monitoring services
• Marketing partners (with appropriate consent)
• Educational research and development partners

Legal and Regulatory Requirements

• Law enforcement agencies (when legally required)
• Regulatory authorities and government agencies
• Legal counsel and professional advisors
• Court-ordered disclosures

We do not sell personal data to third parties for monetary consideration.

How to Exercise Your UCPA Rights

Utah residents may exercise their privacy rights through multiple channels:

Submit a Request

• Online Portal: Visit our Privacy Request Center
• Email: Send requests to [email protected] with "UCPA Request" in the subject line
• Phone: Call our privacy hotline at International: +1 786-382-2000
• Mail: Send written requests to our business address

Required Information for Processing

To verify your identity and process your request, please provide:

• Your full legal name and contact information
• Email address associated with your Kids on the Yard account
• Proof of Utah residency (utility bill, driver's license, etc.)
• Specific details about the nature of your request
• Any additional information needed to locate your personal data

Response Timeline and Process

• Initial Acknowledgment: We confirm receipt of requests within 10 business days
• Response Period: We respond to verified requests within 45 days of receipt
• Complex Requests: May require up to 90 days with advance notification to you
• No Charge Policy: We provide responses at no cost up to twice per calendar year
• Additional Requests: May incur reasonable fees for excessive or repetitive requests

Consumer Request Processing Standards

Verification Procedures

We implement robust identity verification to protect against fraudulent requests:

• Multi-factor authentication for account holders
• Document verification for non-account holders
• Additional verification steps for sensitive data requests
• Secure communication channels for sensitive information

Response Quality Standards

Our responses include:

• Clear, understandable explanations of our findings
• Specific information about data categories and sources
• Details about third-party sharing arrangements
• Instructions for ongoing privacy management

Contact Information

For questions about our UCPA compliance or to exercise your privacy rights:

Privacy Team Kids on the Yard Limitless Virtue LLC 9701 NE 2nd Ave, Suite #1069 Miami Shores, Florida 33138 U.S.A Email: [email protected] Phone: International: +1 786-382-2000

Utah Residents Privacy Hotline: Available Monday-Friday, 9 AM - 5 PM MST

Last Updated: January 1, 2025

For more information about the Utah Consumer Privacy Act, visit: https://le.utah.gov/~2022/bills/static/SB0227.html