Kentucky Resident Privacy Notice under the Kentucky Consumer Data Privacy Act (KYCDPA)

This notice offers extra details for Kentucky residents as required by the Kentucky Consumer Data Privacy Act (KYCDPA). All terms in this section carry the same definitions as those used in the KYCDPA. This notice does not cover data that falls outside the definition of “personal data,” including de-identified or publicly available information under the KYCDPA.

Targeted Advertising and Data Sharing

We use personal data for targeted advertising purposes (as defined by the KYCDPA). This may include personal identifiers, internet activity data, commercial information, and location data. These practices help us deliver advertisements that are more relevant to your interests.

You can opt out of targeted advertising at any time.

We do not receive any monetary payment or other valuable consideration for sharing your personal data. As a result, we do not “sell” your data as that term is defined under the KYCDPA.

Profiling

We do not engage in profiling of consumers that leads to decisions producing legal or similarly significant effects.

Your Rights under the KYCDPA

You can exercise the rights described below by submitting a privacy request here.

Right to Access

You may request confirmation of whether we are processing your personal data and obtain access to that data. You also have the right to receive a copy of your personal data in a portable, readily usable format that enables you to transmit it to another entity.

We may charge a reasonable fee if you submit more than two access requests within a 12-month period, or if we determine your request is clearly unfounded or excessive.

Right to Delete

You can ask us to delete personal data we have collected about you. We will permanently remove this data from our systems and instruct our service providers to do the same. We may retain certain information when permitted or required by law. Any data we keep for these allowed purposes will not be used for other processing activities.

Right to Non-Discrimination

We will not discriminate against you for exercising your KYCDPA rights. This means we will not deny you goods or services, charge different prices, or provide a different quality or level of service.

We also will not retaliate against you as an employee, job applicant, or independent contractor for exercising these privacy rights.

Right to Opt-Out

Sale of Personal Data: We do not sell personal data as defined by the KYCDPA.

Targeted Advertising: You may opt out of the processing of your personal data for targeted advertising.

Profiling: We do not engage in the type of profiling described above.

Authorized Agents

You may designate an authorized agent to submit an opt-out request on your behalf, including through tools such as a web link, browser setting, or universal device setting. We will honor valid requests once we can verify your identity and confirm the agent’s authority to act for you.

Opt-Out Preference Signals

Your browser or device settings may send an automatic opt-out signal (such as the Global Privacy Control or GPC signal) to websites you visit. When we receive such a signal, we honor it by updating your browser’s privacy settings so third parties that respect the signal will not track your activity on our site. The opt-out applies only to your browser identifier and is not linked to any account, since we do not associate your browser with a specific account. GPC can be enabled through supported browsers or browser extensions. Learn how to turn on GPC here.

Right to Correct

You have the right to request correction of inaccurate personal data we maintain about you, considering the nature of the data and the purposes for which we process it.

Right to Withdraw Consent

If our processing of your personal data is based on your consent, you may withdraw that consent at any time by submitting a request here.

Verifying Your Request

After receiving your request, we will verify your identity by comparing the details you provide with information we already hold. If we cannot verify your identity, we may request additional details. If verification is not possible using reasonable efforts, we may need to deny the request. Verification is not required for opt-out requests, though we may deny fraudulent opt-out requests when we have a good-faith, reasonable, and documented basis for doing so.

Right to Appeal

If we deny or do not act on your privacy request, you may appeal the decision. You must submit your appeal within a reasonable time, and no later than 90 days after our response. To appeal, click here and title your email with “Appeal a Decision”.

If you are unable to resolve the issue with us directly and believe your rights have been violated, you may submit a complaint to the Kentucky Attorney General’s Office.