Colorado Privacy Rights Statement

Effective:  November 10, 2023

(Defined terms used but not otherwise defined herein shall have that meaning as ascribed in the eXp World Holdings, Inc. Privacy Policy and Data Processing Policy, or Attendee Terms (as defined below)).

If you are a Colorado resident, you have additional rights with regards to your Personal Information. Please note this Colorado Privacy Rights Statement only applies to Colorado residents.

Colorado Privacy Act Disclosures: The Colorado Privacy Act (“CPA”) (C.R.S. § 6-1-1301, et seq.) requires that we inform you of your rights and that we disclose, among other things, the categories of Personal Information we have collected, sold, and/or disclosed for a business purpose.      

I.    Personal Information Collection

We process the Personal Information set forth in the table below: 

II.    Personal Information Disclosure

We generally share the following categories of Personal Information, as defined in the table above, with third parties:

• • Identifiers
  • Financial information
  • Commercial Information
  • Internet Information

Such information was disclosed to:

• • our Affiliates (joint ventures and service providers that eXp has an ownership stake); 
  • Independent Third Parties (third-party service providers that are not Affiliates) such as providers that offer loans, help us with fulfilling orders, sending postal mail and email, analyzing data, providing marketing assistance, advertising our Services based on activity on our Sites, providing search results and links, tracking website analytics, processing credit card payments, organizing events, and providing customer service; and
  • Our Agents (independent contractor real estate agents and brokers) when you request information about the Services.

If you sign up to attend any eXp World Holdings, Inc. virtual event or in-person event, the collection, use, and disclosure of your Personal Information may also be governed by the applicable event’s terms and conditions (the “Attendee Terms”). To the extent that the Attendee Terms and this Colorado Privacy Rights Statement conflict, the Attendee Terms shall govern. 

III.    Sale of Personal Information

We allow certain third-party advertising networks to collect limited Personal Information through cookies or other tracking technologies on our Sites, which may constitute a “sale” as that term is defined under Colorado law. Additionally, we may obtain your consent to sell your personal information to Independent Third Parties, such as loan providers, to enable such Independent Third Parties to market their services to you. Those third parties collect the following categories of Personal Information, as defined in the table above:

• • Identifiers; 
  • Commercial Information; and
  • Internet Information.

Personal Information was sold for the following purposes:

• • Marketing of our Services to you based on your interaction with our Sites
  • Marketing the services of Independent Third Parties

Personal Information was sold to the following categories of third parties:

• • third party advertising networks; and
  • loan providers.

Please see Section 2 of our Privacy Policy (Usage Information) for more information on tracking technologies used on the Sites.

IV.   Your Rights

1.  Right to Access

Pursuant to the CPA, you have the right to request from us the specific pieces of Personal Information that we have collected and maintained about you, including without limitation, any Personal Information that we share with our processors to provide our Services. 

2.  Right to Delete

You also have the right to request that we delete any Personal Information we have collected about you. Once we verify your request, we will delete any Personal Information from our records, unless retaining your Personal Information is necessary. Please note that we may not be able to delete all Personal Information about you in certain circumstances, such as to provide a product or service you requested or fulfill a contractual obligation. 

3.  Right to Opt-Out 

You have the right to opt-out of (i) the processing of your Personal Information for profiling and/or targeted advertising, and (ii) the sale of your Personal Information. We do not engage in profiling or targeted advertising. You can opt-out of the sale of your Personal Information described in Section III of this Colorado Privacy Rights Statement here: Your Colorado Privacy Choices. 

4.  Right to Correction

You have the right to correct inaccuracies in your Personal Information that we hold about you.

5.  Right to Data Portability

You have the right to obtain a copy of your Personal Information you have provided to us in a commonly used portable and readily usable format, to the extent technically feasible. You may exercise this right no more than two times per calendar year.

V.    How to Make a Request

1.  Where to Send Your Request

If you are a Colorado resident and you wish to make any of the above requests, you, or your authorized agent, may send a request to us by completing the webform or emailing us at the email address below: Webform: Please click here Email: send request to [email protected] with “Colorado Privacy Information Request” in the subject line

2.  Authenticating Your Request

When you contact us, you will need to provide us with enough information to authenticate your request. The specific information we request to authenticate your request will depend on how you make the request, what right you are exercising, and our relationship to you. You must also provide a description of what right you want to exercise and the information to which your request relates. If we are unable to reasonably authenticate your request, we may deny your request. If you are using an authorized agent to submit a request on your behalf, we must authenticate your identity and authenticate the authorized agent’s authority to act on your behalf. The method of authentication will be determined by the data rights you request to exercise, the type, sensitivity, value, and volume of Personal Information involved, the level of possible harm that improper access or use could cause to you, and the cost of such authentication to us.

3.  Responding to Your Request

We will respond to authenticated requests within forty-five (45) days of receipt.  We are not required to: (1) maintain data in identifiable form, or collect, obtain, retain, or access any data or technology in order to associate your request with your Personal Information; or (2) reidentify de-identified data or pseudonymous data.  Except as otherwise set forth in this Colorado Privacy Rights Statement, we may charge you a reasonable fee to cover our administrative costs if you make more than one request per twelve (12) month period.

4.  Appeal

If we refuse to take action on your request to exercise any of your rights described in Section IV, you can appeal our decision within a reasonable time by submitting an appeal using the methods for submitting a request in Section V(1) above. We will consider your appeal and inform you of our decision within forty-five (45) days of receiving your appeal unless an extension is needed. We will inform you prior to the forty-fifth (45th) day if we need to extend the timeline to review your appeal for an additional sixty (60) days. If your appeal is denied, we will provide you notice of such decision and a method of submitting a complaint to the Colorado Attorney General’s Office.