US State Privacy Notice
US State Privacy Notice
Scope
This notice supplements our Privacy Policy and applies to residents of U.S. states with comprehensive consumer privacy laws, including California, Colorado, Connecticut, Utah, Virginia and Pennsylvania. It describes the categories of personal information we collect and the rights available to you.
Categories of personal information we collect
- Identifiers: name, email address, postal address, phone number, IP address, account identifiers
- Commercial information: products purchased or viewed, order history, preferences
- Internet activity: interactions with our site, device and browser information
- Payment information: processed by payment providers; we do not store full card numbers
- Inferences: preferences and interests derived from the above
Purposes of processing
We use personal information to fulfill orders, provide support, improve our products and site, prevent fraud, send marketing where permitted, and comply with legal obligations.
Disclosure and “sale” or “sharing”
We disclose personal information to service providers that perform services for us, such as payment processors, shipping carriers, analytics and marketing providers. We do not sell personal information for money. Where we use cookies or similar technologies for cross-context behavioral advertising, this may be considered “sharing” or a “sale” under some state laws. You can opt out at any time via Do Not Sell or Share My Personal Information.
Your rights
Subject to applicable law and verification, you may have the right to:
- Know or access the personal information we hold about you
- Correct inaccurate personal information
- Delete personal information we collected from you
- Opt out of the sale or sharing of personal information and of targeted advertising
- Limit the use and disclosure of sensitive personal information
- Not be discriminated against for exercising your privacy rights
How to exercise your rights
Email support@cotopaxix.com with the subject line “Privacy Request” and tell us which right you wish to exercise. We will verify your identity using information we already hold, such as your email address and order details. Authorized agents may submit requests with written permission; additional verification may be required.
We aim to respond within 45 days, or the period required by your state’s law, and will let you know if we need more time.
Global Privacy Control
Where required by law, we honor Global Privacy Control (GPC) browser signals as a request to opt out of sale or sharing.
