Colorado Privacy Rights Statement
Effective: July 1, 2024
(Defined terms used but not otherwise defined herein shall have that meaning as ascribed in the eXp World Holdings, Inc. Privacy Policy and Data Processing Policy, or Attendee Terms (as defined below)).
If you are a Colorado resident, you have additional rights with regards to your Personal Information. Please note this Colorado Privacy Rights Statement only applies to Colorado residents.
Colorado Privacy Act Disclosures: The Colorado Privacy Act (“CPA”) (C.R.S. § 6-1-1301, et seq.) requires that we inform you of your rights and that we disclose, among other things, the categories of Personal Information we have collected, sold, and/or disclosed for a business purpose.
I. Personal Information Collection
We process the Personal Information set forth in the table below:
| Categories | Collected | Purpose for Processing |
Identifiers (Examples: name, address, email address, IP address, account username) | Yes |
|
Financial Information (Examples: bank account number or other financial information) | Yes |
|
Sensitive Data (Examples: Racial or ethnic origin, religious beliefs, health condition, sex life or sexual orientation, citizenship or citizenship status, genetic data, biometric data, children’s data) | No | We do not process Sensitive Data. |
Commercial Information (Examples: records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies) | Yes |
|
Internet Information (Examples: browsing history, search history, information derived from cookies, pixels or web beacons, geolocation data derived from your IP address, other information about a consumer’s interaction with eXp Site or Services) | Yes |
|
Audio, Electrical, or Visual Information (Example: information collected from limited session recording technology) | Yes |
|
II. Personal Information Disclosure
We generally share the following categories of Personal Information, as defined in the table above, with third parties:
- Identifiers
- Financial information
- Commercial Information
- Internet Information
Such information was disclosed to:
- our Affiliates (joint ventures and service providers that eXp has an ownership stake);
- Independent Third Parties (third-party service providers that are not Affiliates) such as providers that offer loans, advertising
networks, providers that help us with fulfilling orders, sending postal mail and email, analyzing data, providing marketing assistance, advertising our Services based on activity on our Sites, providing search results and links, tracking website analytics, processing credit card payments, organizing events, and providing customer service; and - Our Agents (independent contractor real estate agents and brokers) when you request information about the Services. We may also share identifiers of Agents and event attendees to facilitate networking at our events.
If you sign up to attend any eXp World Holdings, Inc. virtual event or in-person event, the collection, use, and disclosure of your Personal Information may also be governed by the applicable event’s terms and conditions (the “Attendee Terms”). To the extent that the Attendee Terms and this Colorado Privacy Rights Statement conflict, the Attendee Terms shall govern.
III. Sale of Personal Information
We allow certain third-party advertising networks to collect limited Personal Information (as detailed in the categories above) through cookies or other tracking technologies on our Sites, which may constitute a “sale” and/or “targeted advertising” as those terms are defined under Colorado law. Additionally, we may obtain your consent to sell your personal information to Independent Third Parties, such as loan providers, to enable such Independent Third Parties to market their services to you. Those third parties collect the following categories of Personal Information, as defined in the table above:
- Identifiers;
- Commercial Information; and
- Internet Information.
Personal Information was sold for the following purposes:
- Marketing of our Services to you based on your interaction with our Sites;
- Displaying advertisements; and
- Marketing the services of Independent Third Parties.
Personal Information was sold to the following categories of third parties:
- third party advertising networks; and
- loan providers.
Please see Section 2 of our Privacy Policy (Usage Information) for more information on tracking technologies used on the Sites.
IV. Your Rights
1. Right to Access
Pursuant to the CPA, you have the right to request from us the specific pieces of Personal Information that we have collected and maintained about you, including without limitation, any Personal Information that we share with our processors to provide our Services.
2. Right to Delete
You also have the right to request that we delete any Personal Information we have collected about you. Once we verify your request, we will delete any Personal Information from our records, unless retaining your Personal Information is necessary. Please note that we may not be able to delete all Personal Information about you in certain circumstances, such as to provide a product or service you requested or fulfill a contractual obligation.
3. Right to Opt-Out
You have the right to opt-out of (i) the processing of your Personal Information for profiling and/or targeted advertising, and (ii) the sale of your Personal Information. You may opt-out of targeted advertising by adjusting your cookie preferences on our Sites, visiting the opt-out request pages of industry groups providing broad opt-out options like the Network Advertising Initiative, Digital Advertising Alliance, AdChoices Canada, or European Interactive Digital Advertising Alliance, or by visiting the specific ad networks like Google, LinkedIn, Twitter, and Meta. Please note that opting out with industry groups or advertising networks will only apply to the specific browser or device from which you opt-out. On your mobile device you may also go to your device settings and select “Limit Ad Tracking” (iOS devices) or “Opt-out of interest-based ads” (Android devices), which will allow you to limit our use of information collected from or about your mobile device for the purposes of displaying online targeted advertising to you. You can opt-out of the sale of your Personal Information described in Section III of this Colorado Privacy Rights Statement here: Your Colorado Privacy Choices.
4. Right to Correction
You have the right to correct inaccuracies in your Personal Information that we hold about you.
5. Right to Data Portability
You have the right to obtain a copy of your Personal Information you have provided to us in a commonly used portable and readily usable format, to the extent technically feasible. You may exercise this right no more than two times per calendar year.
V. How to Make a Request
1. Where to Send Your Request
If you are a Colorado resident and you wish to make any of the above requests, you, or your authorized agent, may send a request to us by completing the webform or emailing us at the email address below:
Webform: Please click here
Email: send request to [email protected] with “Colorado Privacy Information Request” in the subject line
2. Authenticating Your Request
When you contact us, you will need to provide us with enough information to authenticate your request. The specific information we request to authenticate your request will depend on how you make the request, what right you are exercising, and our relationship to you. You must also provide a description of what right you want to exercise and the information to which your request relates. If we are unable to reasonably authenticate your request, we may deny your request.
If you are using an authorized agent to submit a request on your behalf, we must authenticate your identity and authenticate the authorized agent’s authority to act on your behalf. The method of authentication will be determined by the data rights you request to exercise, the type, sensitivity, value, and volume of Personal Information involved, the level of possible harm that improper access or use could cause to you, and the cost of such authentication to us.
3. Responding to Your Request
We will respond to authenticated requests within forty-five (45) days of receipt.
We are not required to: (1) maintain data in identifiable form, or collect, obtain, retain, or access any data or technology in order to associate your request with your Personal Information; or (2) reidentify de-identified data or pseudonymous data.
Except as otherwise set forth in this Colorado Privacy Rights Statement, we may charge you a reasonable fee to cover our administrative costs if you make more than one request per twelve (12) month period.
4. Appeal
If we refuse to take action on your request to exercise any of your rights described in Section IV, you can appeal our decision within a reasonable time by submitting an appeal using the methods for submitting a request in Section V(1) above. We will consider your appeal and inform you of our decision within forty-five (45) days of receiving your appeal unless an extension is needed. We will inform you prior to the forty-fifth (45th) day if we need to extend the timeline to review your appeal for an additional sixty (60) days. If your appeal is denied, we will provide you notice of such decision and a method of submitting a complaint to the Colorado Attorney General’s Office.
Copyright © 2024 eXp World Holdings, Inc. | All Rights Reserved.
