Oregon Privacy Policy

Last Updated: September 4, 2025

This supplement delivers additional guidance for individuals residing in Oregon in accordance with the Oregon Consumer Privacy Act (OCPA). Any terms appearing in this segment hold the same definitions as those in the OCPA. It does not cover details that do not qualify as "personal data," including anonymized content or publicly obtainable information per the OCPA.

Data Transactions and Customized Promotions

Our organization engages in "sales" of select personal data to external entities, as defined by the OCPA, encompassing categories like unique individual indicators, online engagement records, and geographic details.

We handle personal data to support tailored marketing efforts, as specified in the OCPA, involving elements such as individual indicators, online engagements, purchasing history, and geographic information. This facilitates the delivery of promotions that better match your preferences.

You can choose to exclude yourself from these activities by emailing compliance@xendurance.com.

Automated Assessments

The OCPA allows individuals to withdraw from automated evaluations resulting in determinations with notable legal or comparable implications, such as rulings on financing, hiring, or coverage plans.

Our practices do not include such automated evaluations for decisions with legal or equivalently important outcomes.

Your Protections Under OCPA

The safeguards provided by the OCPA are outlined below. To initiate a privacy inquiry, email compliance@xendurance.com.

Access Privileges

You can confirm if we are managing your personal data and retrieve that information. In instances of automated management, you are eligible to receive a copy in a movable and convenient format that enables sharing with another entity.

If you file an access inquiry more than once within a 12-month timeframe, or if we find it clearly baseless or overly burdensome, a minor charge may be applied.

Privilege to Acquire Third-Party Roster

You are entitled to request a compilation of the exact external entities to which we have shared personal data. We have shared or may share personal data with these entities:

Shop Pay

Shopify Network Intelligence

Google Ads

Google Analytics

Google Pay

Meta Ads

PayPal - Pay with PayPal, Venmo, Pay Later

Pinterest Ads

Tiktok Ads

Erasure Privileges

You may direct us to eliminate any personal data we have gathered from or about you. We will completely remove it from our systems and instruct our vendors to do the same, though we might hold onto it if required for particular lawful reasons.

Any retained information for these reasons will not undergo handling for alternative objectives.

Safeguard Against Unfair Treatment

Exercising your OCPA privacy protections will not lead to biased actions from us, such as altered pricing or reduced service levels.

We will avoid any form of reprisal against you in roles like employee, job applicant, or independent contributor for utilizing these protections.

Withdrawal Options

For data transactions: Activate your withdrawal choice by emailing compliance@xendurance.com.

For customized promotions: Activate your withdrawal choice via compliance@xendurance.com.

For automated assessments: Our operations do not encompass evaluations linked to decisions with legal or similarly critical effects.

Appointed Representative

You can designate a representative to submit a withdrawal request on your behalf, potentially using tools like a website connection, browser configuration, or device-wide setting. We will honor these if we can verify your identity and the representative's legitimacy to act for you.

Automatic Withdrawal Indicators

Certain browser options enable the automatic sending of a withdrawal signal, like the Global Privacy Control (GPC), to visited platforms. Upon detection, we set a U.S.-specific privacy marker in your browser, ensuring compliant third parties cease tracking your site interactions. This withdrawal ties only to your browser's unique identifier, not to any profile details, since we lack knowledge of browser-profile connections. GPC is available on select browsers or as an add-on; learn how to activate it here.

Rectification Privileges

You can seek corrections to errors in your personal data, considering the information's type and our management goals.

Validating Your Inquiry

After receiving your inquiry, we will match the supplied details against our collected records for validation. If we cannot confirm it, we may request more information. Failure to provide extras or to confirm using typical methods could result in rejection.

Challenge Process

Should we refuse to fulfill any privacy inquiry, you can contest that refusal in a timely fashion, no more than 90 days after our notification. To lodge a challenge, email compliance@xendurance.com and note "Appeal a Decision" in the title.

If you feel your protections have been breached and cannot resolve it directly with us, you may submit a grievance to the Oregon Attorney General’s Office.