Colorado Privacy Notice
COLORADO PRIVACY PRINCIPLES
Last Updated Date: July 28, 2023
Unless otherwise defined in this Colorado Privacy Notice (“Notice”), all terms defined in the Privacy Policy and all other terms defined in the Colorado Privacy Act, including its implementing regulations ("CPA") retain the- same meaning when used in this Notice.
This Notice supplements the information contained in our Privacy Policy and applies solely to individual residents of Colorado (“consumers” or “you”).
This Notice describes how we collect, use, disclose and otherwise process personal data of individual residents of Colorado, within the scope of the CPA.
When we use the term “personal data” in this Notice, we mean information that is linked or reasonably linkable to an individual who can be readily identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, specific geolocation data, or an online identifier.
For the purposes of this Notice, personal data does not include:
- Deidentified data that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual, or a device linked to such an individual.
- Publicly available information that is lawfully made available from federal, state, or local government records and that we have a reasonable basis to believe a consumer has lawfully made available to the general public.
- Information about an individual acting in a commercial or employment context, as a job applicant, or as a beneficiary of someone acting in an employment context.
We process the categories of personal data further described in the “Types of Personal Information We Collect” section of the Privacy Policy and as shown in the table below.
As described further in the “How We Share Your Personal Information” section of the Privacy Policy, we share personal data with service providers or processors that help us operate our Platform and business. We may also share personal data with a variety of third parties, including for marketing purposes; if we are subject to certain corporate transactions or reorganizations; with third parties to comply with law or to protect our rights or the rights and safety of others; or for purposes otherwise disclosed or for which you have consented.
For purposes of this Notice, when we use the term “third party” we mean entities that are not entities with whom you interact with directly.
We have collected each of the categories of personal data noted in the table below and disclosed it to the categories of third parties listed below. The table also indicates when we sold the personal data to third parties or processed such information for targeted advertising.
We sell personal data and process it for targeted advertising purposes. Targeted advertising means when we display advertisements to you based on information we obtain about you through nonaffiliated websites, applications, or online services to predict your preferences or interests. Please see your rights to opt out from these activities listed in the How to Exercise Your Colorado Privacy Rights Section below.
We process personal data for different purposes, depending on how you interact with the Platform. We process personal data about you for the purposes described in the “How We Use Your Personal Information” section of the Privacy Policy.
We sell or share your personal data for the purposes further described in the “How We Share Your Personal Information” section of the Privacy Policy.
he table also indicates when we sold the personal data to third parties or processed such information for targeted advertising.
To Exercise Your Rights to Know, Access, Correct, Delete and/or “Shine the Light”
Please submit a request by filling out our Privacy Rights Request Form or by calling 1-888-258-3247 (Monday through Friday, 8:30 AM – 9:00 PM Central)
We may need to verify your identity and confirm you are a resident of the State of California before processing most requests, which may require us to obtain additional personal information from you. In order to verify your identity, we will generally require either the successful authentication of your account, or the matching of sufficient information you provide us to the information we maintain about you in our systems. Please provide your name, email address and mailing address in the original request, as well as an explanation of the rights you wish to exercise. We will only use the personal information provided in connection with a Privacy Rights Request to review and comply with the request. If you do not provide this information, we may not be able to verify or complete your request in all circumstances.
If you wish to submit a verifiable consumer request on behalf of another individual we will also need sufficient information to verify that the individual is the person about whom we collected personal information and that you are authorized to submit the request on their behalf. Please see the “Authorized Agents” section below for more information.
In certain circumstances, we may decline a request to exercise the rights described above, in accordance with applicable law.
To Exercise Your Right to Opt Out of Personal Information Sales or Sharing
You do not need to create an account with us to exercise your Right to Opt Out of Personal Information Sales or Sharing. However, we may ask you to provide additional personal information (including your name, email address and mailing address) so that we can properly identify you in our dataset to facilitate the opt-out request. If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems.
Once you make an opt-out request, you may change your mind and opt back in to personal information sales at any time by contacting us at privacy@Blueair.com.
To exercise your right to opt-out of personal information sales or sharing, please submit a request by clicking the button below:
DO NOT SELL MY PERSONAL INFORMATION
In addition, as is common practice among companies that operate online, we permit third party advertising networks, social media companies and other third party businesses to collect personal information directly from your browser or device through cookies or similar online tracking technologies when you visit or interact with our websites, use our apps or otherwise engage with us. For example, they may collect Internet/Network information, such as a cookie or device ID, browsing history and website usage, Geolocation Data, Commercial Information, and Inferences generated from your browsing history and interactions with our service as well as other sites and services. These third parties use this information for the purposes of serving ads that are more relevant, for ad campaign measurement and analytics, and for fraud detection and reporting and may sell or share that information to other businesses for advertising and other purposes. By visiting the bottom of a Unilever brand homepage that links to this Notice and clicking on “AdChoices – Do Not Sell or Share” at the bottom of the page, you will be taken to a tool which will allow you to opt out of certain online advertising and tracking activities. Please see the section entitled “Online Advertising and Third Party Tracking” in our Privacy Policy to learn how you may exercise your choice over this data collection for advertising purposes.
Personal Information of Children Under Age 16
We do not sell or share personal information of consumers we know to be less than 16 years of age unless we receive affirmative authorization from the child who is between 13 and 16 years of age, or the parent or guardian of a child less than 13 years of age. The parent or the child who has opted into personal information sales or sharing may opt out of future sales at any time. If a parent, guardian or child has provided affirmative authorization, they may opt out of future processing at any time by contacting us at privacy@Blueair.com.
Authorized Agents
In certain circumstances, you are permitted to use an “authorized agent” (as that term is defined by the CCPA) to submit CCPA requests on your behalf. We may verify the authorized agent’s authority to act on your behalf as follows:
For requests to know, access, correct or delete personal information, we may ask you to provide sufficient evidence to show that you have provided the authorized agent signed permission to act on your behalf, verified your own identity directly with us pursuant to the instructions set forth in this Notice, and directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf.
For requests to opt-out of personal information “sales” or “sharing,” we may ask you to provide a signed permission demonstrating your authorized agent has been authorized by you to act on your behalf.
We do not discriminate against you for requesting any of the rights noted above. We are permitted to deny or limit your request in accordance with applicable laws.
If you have any questions, comments or concerns with respect to our privacy practices or this Notice, or wish to update your information, please feel free to contact us at privacy@blueair.com or by telephone at (888) 258-3247 (Monday through Friday, 8:00 AM – 5:00 PM Central). You may also write to us at the following address:
Blueair, Inc
Attn: Privacy Lead
125 S Clark St. Suite 2000
Chicago, IL 60603
From time to time, we may change our Notice. We will notify you of any material changes to our Notice as required by law. We will also post an updated copy of this Notice on our Platform. Please check our Platform periodically for updates.