Seven Mountains Media

STATES-SPECIFIC PRIVACY NOTICE

Last Updated: 11/18/2024

This U.S. State-Specific Privacy Notice (this “State-Specific Notice”) contains disclosures about the following states and supplements the information in the privacy policy of Seven Mountains Media, a Kentucky LLC. (“Seven Mountains Media”, “we”, “our”), available here https://7mountainsmedia.com/state-specific-privacy-policy/ (the “Privacy Policy”). Capitalized terms not defined in this State-Specific Notice shall have the meaning assigned to them in our Privacy Policy. The terms “Personal Data” and “Personal Information” are used interchangeably.  

1. [California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act of 2020 (“CPRA”) and such other data protections laws in California (collectively, “California Law“);]
2. [Colorado Privacy Act of 2021 (“CPA”) and such other data protections laws in Colorado (collectively, “Colorado Law“);]
3. [Connecticut Data Privacy Act of 2022 (“CTDPA”) and such other data protections laws in Connecticut (collectively, “Connecticut Law“);]
4. [Montana Consumer Data Privacy Act of 2023 (“MCDPA”) and such other data protections laws in Montana (collectively, “Montana Law“);]
5. [Nevada Revised Statutes Chapter 603A of 2022: Security and Privacy of Personal Information (“NRS”) and such other data protections laws in Nevada (collectively, “Nevada Law“);]
6. [Oregon Consumer Privacy Act of 2023 (“OCPA”) and such other data protections laws in Oregon (collectively, “OregonLaw“);]
7. [Texas Data Privacy and Security Act of 2023 (“TDPSA”) and such other data protections laws in Texas (collectively, “Texas Law“);]
8. [Utah Consumer Privacy Act of 2022 (“UCPA”) and such other data protections laws in Utah (collectively, “Utah Law“);]
9. [Virginia Consumer Data Protection Act of 2021 (“VCDPA”) and such other data protections laws in Virginia (collectively, “Virginia Law“);]

1. California
   1. Your Rights and Choices

Right to Know. You have the right to request that we disclose certain information to you about our collection and use of your Personal Information. Once we receive your request and confirm your identity, we will disclose to you: 

• The categories of Personal Information we collected about you;
• The categories of sources from which we collected Personal Information about you;
• Our business or commercial purpose for collecting, disclosing, “selling” or “sharing” such Personal Information;
• The categories of Personal Information we disclosed about you for a business purpose and the categories of third parties to whom such Personal Information was disclosed for a business purpose;
• The categories of Personal Information that we “sold” or “shared” about you;
• The categories of third parties to whom your Personal Information was “sold” or “shared” and we will make such disclosure for each category of such Personal Information; and
• The specific pieces of Personal Information we collected about you.

Right to Correct. You have the right to request that we correct your Personal Information if you think it is inaccurate, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information. Once we receive your request and confirm your identity, we will use commercially reasonable efforts to correct your inaccurate Personal Information and will direct our service providers to do the same.

Right to Delete. You have the right to request that we delete any of your Personal Information that we have collected from you and retained, subject to certain exceptions. Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the Personal Information applies. 

We may deny your deletion request if retaining the Personal Information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the Personal Information, fulfill the terms of a written warranty, provide a good or service that you requested or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
• Help to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for those purposes;
• Debug to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise their right of free speech, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 of Title 12 of Part 2 of the Penal Code (Cal. Penal Code § 1546 et. seq.);
• Engage in public or peer-reviewed scientific, historical, or statistical research that adheres to all other applicable ethics and privacy laws, when our deletion of the Personal Information is likely to render impossible or seriously impair the ability to complete such research, if you previously provided informed consent;
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us and compatible with the context in which you provided the information; and/or
• Comply with a legal obligation.

We will delete or de-identify Personal Information not subject to one of these exceptions from our records and will direct our service providers, contractors and third parties to whom we have “sold” or “shared” your Personal Information to take similar action, unless this proves impossible or involves disproportionate effort. However, we may maintain a confidential record of your deletion request to prevent the “sale” of your Personal Information; to comply with applicable laws; and for other purposes permissible under California Law.

Right to Opt Out of Certain Processing for Sensitive Information. California Law provides its residents with a right to limit the use and disclosure of Sensitive Personal Information.

Right to Data Portability. You have the right to obtain a copy of the Personal Information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Information to another controller without hindrance, where the processing is carried out by automated means. 

Right to Opt Out of Sales. You have the right to direct us to stop “selling” (i.e., disclosing your Personal Information to third parties for monetary or other valuable consideration) or “sharing” your Personal Information (i.e., disclosing your Personal Information to third parties for cross-contextual behavioral advertising). 

Once we receive your request and confirm your identity, we will stop “selling” or “sharing” your Personal Information, unless you subsequently provide consent for the “sale” or “sharing” of your Personal Information.

Other California Privacy Rights. California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Website or app who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to dev@7mountainsmedia.com or write to us at: 115 W Main Street, Frankfort KY 40601. You may only make one such request during a calendar year. We do not disclose any Personal Information to third parties for their direct marketing purposes without your approval. We “share” Personal Information within the Seven Mountains Media Group for marketing purposes.

• Exercising your Rights under California Law

Section 9 of the Privacy Policy https://7mountainsmedia.com/wp-content/uploads/2024/11/Privacy-Policy-US.pdf will provide you with information on how to exercise your rights. Under California law, we are required to make additional disclosures:

• To exercise your rights to opt out of “sale” or “sharing”, please submit a request by using the following link https://7mountainsmedia.com/contact-us/ that you can also find on our website entitled “Do Not Sell or Share My Personal Information”. 
• To exercise your right to limit the use of Sensitive Personal Information, please use this https://7mountainsmedia.com/contact-us/that you can also find on our website titled “Limit the Use of Sensitive Personal Information.”

Only you, or someone legally authorized to act on your behalf, may make a request related to your Personal Information. You may also make a request on behalf of your minor child. 

Your contains disclosures that the following states request related to Personal Information must:

1. Provide sufficient information or documentation that allows us to reasonably verify whether you are the person about whom we collected Personal Information or an authorized representative. Such information or documentation may include:

• Certain Personal Information about you that we have on file (e.g., postal address) or information related to the purchases you made on the Website.
• Certain information or certification showing your authority or relationship to the person on whose behalf you are submitting the request. 

1. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make it. Other than under the Shine the Light law, you may make two such requests during the course of a calendar year.

1. Response Timing and Format

Please review Section 9 of our Privacy Policy, see https://7mountainsmedia.com/state-specific-privacy-policy/ for our response time. For requests under California’s Shine the Light Law, we will respond within thirty (30) days of receipt of your request.

• Appealing Privacy Rights Decision

You may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted via email to dev@7mountainsmedia.com. If we deny your appeal and you would like to file a claim with the Attorney General, please follow this link: https://oag.ca.gov/contact/consumer-complaint-against-business-or-company.

• Colorado

• Your Rights

Right to Access. You have the right to confirm whether we are processing your Personal Data and to access your Personal Data.

Right to Correct. You have the right to request that we correct your Personal Data if you think it is inaccurate, taking into account the nature of the Personal Data and the purposes of the processing of the Personal Data. Once we receive your request and confirm your identity, we will use commercially reasonable efforts to correct your inaccurate Personal Data and will direct our service providers to do the same.

Right to Delete. You have the right to request deletion of all Personal Data unless the retention of Personal Data is required by law.

Right to Opt Out. You have the right to opt out of the processing of your Personal Data regarding:

• Targeting Advertising
• Sale of Personal Data
• Profiling to the extent that this profiling has a significant legal effect on you. Profiling is when your personal information is automatically processed to make predictions or assessments about you. This can include understanding your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

As long as we can determine your identity or the identity of your agent through commercially reasonable efforts, we will comply with any opt-out request received, including those received through weblinks indicating preference or browser settings, browser extensions, or global device settings. 

Right to Data Portability. You have the right to obtain a copy of the Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Data to another controller without hindrance, where the processing is carried out by automated means. 

• Appealing Privacy Rights Decisions

You may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted via email to dev@7mountainsmedia.com. [If we deny your appeal and you would like to file a claim with the Attorney General, please follow this link: https://coag.gov/file-a-complaint/data-privacy-data-breach.]

• Connecticut

• Your Rights and Choices

Right to Access. You have the right to confirm whether we are processing your Personal Data and to access your Personal Data.

Right to Correct. You have the right to request that we correct your Personal Data if you think it is inaccurate, taking into account the nature of the Personal Data and the purposes of the processing of the Personal Data. Once we receive your request and confirm your identity, we will use commercially reasonable efforts to correct your inaccurate Personal Data and will direct our service providers to do the same.

Right to Delete. You have the right to request deletion of all Personal Data unless the retention of Personal Data is required by law.

Right to Opt Out. You have the right to opt out of the processing of your Personal Data regarding:

• Targeting Advertising
• Sale of Personal Data
• Profiling to the extent that this profiling has a significant legal effect on you. Profiling is when your personal information is automatically processed to make predictions or assessments about you. This can include understanding your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

As long as we can determine your identity or the identity of your agent through commercially reasonable efforts, we will comply with any opt-out request received, including those received through weblinks indicating preference or browser settings, browser extensions, or global device settings. 

Right to Obtain. You have the right to obtain a copy of the Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Data to another controller without hindrance, where the processing is carried out by automated means. 

• Appealing Privacy Rights Decisions

You may be able to appeal a decision we have made in connection with your privacy rights request. We will respond to the appeal within 60 days of receipt of your appeal. All appeal requests should be submitted via email to dev@7mountainsmedia.com. [If we deny your appeal and you would like to file a claim with the Attorney General, please follow this link: https://www.dir.ct.gov/ag/complaint/e-complaint.aspx?CheckJavaScript=1?CheckJavaScript=1.]

• Montana

• Your Rights and Choices

Right to Access. You have the right to confirm whether we are processing your Personal Data and to access your Personal Data.

Right to Correct. You have the right to request that we correct your Personal Data if you think it is inaccurate, taking into account the nature of the Personal Data and the purposes of the processing of the Personal Data. Once we receive your request and confirm your identity, we will use commercially reasonable efforts to correct your inaccurate Personal Data and will direct our service providers to do the same.

Right to Delete. You have the right to request deletion of all Personal Data unless the retention of Personal Data is required by law.

Right to Opt Out. You have the right to opt out of the processing of your Personal Data regarding:

• Targeting Advertising
• Sale of Personal Data
• Profiling to the extent that this profiling has a significant legal effect on you. Profiling is when your personal information is automatically processed to make predictions or assessments about you. This can include understanding your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

As long as we can determine your identity or the identity of your agent through commercially reasonable efforts, we will comply with any opt-out request received, including those received through weblinks indicating preference or browser settings, browser extensions, or global device settings. 

Right to Obtain. You have the right to obtain a copy of the Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Data to another controller without hindrance, where the processing is carried out by automated means. 

• Appealing Privacy Rights Decisions

You may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted via email to dev@7mountainsmedia.com. [If we deny your appeal and you would like to file a claim with the Attorney General, please follow this link: https://dojmt.gov/consumer/consumer-complaints/.]

• Nevada

• Review and Request Changes

You may request that we correct your Personal Information if you think it is inaccurate. Once we receive your request and confirm your identity, we will use commercially reasonable efforts to correct your inaccurate Personal Information and will direct our service providers to do the same.

• Right to Opt Out of Sales

Nevada Law provides its residents with a limited right to opt-out of certain Personal Information sales. Residents who wish to exercise this sale opt-out rights may submit a request to the contact information below.

[However, please know that we do not currently sell Personal Information triggering Nevada Law’s opt-out requirements.]

• Appealing Privacy Rights Decisions

You may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted via email to dev@7mountainsmedia.com. [If we deny your appeal and you would like to file a claim with the Attorney General, please follow this link: https://ag.nv.gov/Complaints/File_Complaint/.]

• Security Breach

In case any breach of the security of our system occurs in which your Personal Information was, or is reasonably believed to have been, acquired by an unauthorized person, and if the cost of providing notification exceeds $250,000, the Personal Information of more than 500,000 persons has been affected, or we do not have sufficient contact information, we may notify you via email, on our website, or through state-wide media.

• Oregon

• Your Rights and Choices

Right to Access. You have the right to confirm whether we are processing your Personal Data and to access your Personal Data.

Right to Correct. You have the right to request that we correct your Personal Data if you think it is inaccurate, taking into account the nature of the Personal Data and the purposes of the processing of the Personal Data. Once we receive your request and confirm your identity, we will use commercially reasonable efforts to correct your inaccurate Personal Data and will direct our service providers to do the same.

Right to Delete. You have the right to request deletion of all Personal Data unless the retention of Personal Data is required by law.

Right to Opt Out. You have the right to opt out of the processing of your Personal Data regarding:

• Targeting Advertising
• Sale of Personal Data
• Profiling to the extent that this profiling has a significant legal effect on you. Profiling is when your personal information is automatically processed to make predictions or assessments about you. This can include understanding your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

As long as we can determine your identity or the identity of your agent through commercially reasonable efforts, we will comply with any opt-out request received, including those received through weblinks indicating preference or browser settings, browser extensions, or global device settings. 

Right to Obtain. You have the right to obtain a copy of the Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Data to another controller without hindrance, where the processing is carried out by automated means. 

• Appealing Privacy Rights Decisions

You may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted via email to dev@7mountainsmedia.com. [If we deny your appeal and you would like to file a claim with the Attorney General, please follow this link: https://www.doj.state.or.us/consumer-protection/contact-us.]

• Texas

• Your Rights and Choices

Right to Access. You have the right to confirm whether we are processing your Personal Data and to access your Personal Data.

Right to Correct. You have the right to request that we correct your Personal Data if you think it is inaccurate, taking into account the nature of the Personal Data and the purposes of the processing of the Personal Data. Once we receive your request and confirm your identity, we will use commercially reasonable efforts to correct your inaccurate Personal Data and will direct our service providers to do the same.

Right to Delete. You have the right to request deletion of all Personal Data unless the retention of Personal Data is required by law.

Right to Opt Out. You have the right to opt out of the processing of your Personal Data regarding:

• Targeting Advertising
• Sale of Personal Data
• Profiling to the extent that this profiling has a significant legal effect on you. Profiling is when your personal information is automatically processed to make predictions or assessments about you. This can include understanding your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

As long as we can determine your identity or the identity of your agent through commercially reasonable efforts, we will comply with any opt-out request received, including those received through weblinks indicating preference or browser settings, browser extensions, or global device settings. 

Right to Obtain. You have the right to obtain a copy of the Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Data to another controller without hindrance, where the processing is carried out by automated means. 

We will only use Personal Data provided in the request to verify the requestor’s identity or authority to make it. You may make two such requests during the course of a calendar year.

• Appealing Privacy Rights Decisions

You may appeal a decision we have made in connection with your privacy rights request by reaching out to us via our contact information in Section 14 in our Privacy Policy. We will let you know whether we approve your appeal and the reasons why we approved or not approved the appeal within 60 days of the receipt of the appeal. [If we deny your appeal and you would like to file a claim with the Attorney General, please follow this link: https://oag.my.salesforce-sites.com/CPDOnlineForm.]

• Utah

1. 1. Your Rights and Choices

Right to Access. You have the right to confirm whether we are processing your Personal Data and to access your Personal Data.

Right to Delete. You have the right to request deletion of all Personal Data unless the retention of Personal Data is required by law.

Right to Opt Out. You have the right to opt out of the processing of your Personal Data regarding:

• Targeting Advertising
• Sale of Personal Data

As long as we can determine your identity or the identity of your agent through commercially reasonable efforts, we will comply with any opt-out request received, including those received through weblinks indicating preference or browser settings, browser extensions, or global device settings. 

Right to Obtain. You have the right to obtain a copy of the Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Data to another controller without hindrance, where the processing is carried out by automated means. 

• Privacy Rights Decisions

You may appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted via email to dev@7mountainsmedia.com. [If we deny your appeal, you may file a complaint with the Attorney General by following this link: https://www.attorneygeneral.utah.gov/contact/complaint-form.]

• Virginia

1. 1. Your Rights and Choices

Right to Access. You have the right to confirm whether we are processing your Personal Data and to access your Personal Data.

Right to Correct. You have the right to request that we correct your Personal Data if you think it is inaccurate, taking into account the nature of the Personal Data and the purposes of the processing of the Personal Data. Once we receive your request and confirm your identity, we will use commercially reasonable efforts to correct your inaccurate Personal Data and will direct our service providers to do the same.

Right to Delete. You have the right to request deletion of all Personal Data unless the retention of Personal Data is required by law.

Right to Opt Out. You have the right to opt out of the processing of your Personal Data regarding:

• Targeting Advertising
• Sale of Personal Data
• Profiling to the extent that this profiling has a significant legal effect on you. Profiling is when your personal information is automatically processed to make predictions or assessments about you. This can include understanding your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

As long as we can determine your identity or the identity of your agent through commercially reasonable efforts, we will comply with any opt-out request received, including those received through weblinks indicating preference or browser settings, browser extensions, or global device settings. 

Right to Obtain. You have the right to obtain a copy of the Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Data to another controller without hindrance, where the processing is carried out by automated means. 

We will only use Personal Data provided in the request to verify the requestor’s identity or authority to make it. You may make two such requests during a calendar year.

• Appealing Privacy Rights Decisions

You may appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted via email to dev@7mountainsmedia.com. We will respond to the appeal within sixty (60) days of receipt of your appeal. [If we deny your appeal, you may file a complaint with the Attorney General by following this link: https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint.]