Last updated: January 20, 2023
This Privacy Notice for Covered Residents (the “Notice”) supplements the information contained in Project Applecart LLC’s (“Applecart”, “we”, “us”, or “our”) Privacy Policy and applies only if you reside in the Commonwealth of Virginia (the “Covered States”) (a resident of any Covered States, a “Covered Consumer”). The Notice applies equally to Covered Consumers unless noted otherwise.
For purposes of this Notice “Sell,” “Selling,” “Sale,” or “Sold,” means the exchange of Personal Information for monetary or other valuable consideration by Applecart to a third party. “Sell,” “Selling,” “Sale,” or “Sold,” does not include the following:
“Sensitive Personal Information” means any of the following: (1) Personal Information revealing racial or ethnic origin, religious beliefs, a mental or physical health condition or diagnosis, sex life or sexual orientation, or citizenship or citizenship status; (2)genetic or biometric data that may be processed for the purpose of uniquely identifying an individual; (3) Personal Information from a person known to be under 13 years of age; or (4) if you are a Virginia Consumer, precise geolocation data.
“Verifiable Request” means the identifying information provided by a consumer in connection with a request matches the Personal Information of the consumer already maintained by us. Identifying information you can submit in order to permit Applecart to verify your request may include your first, middle, and last name, date of birth street address, city, state, zip-code, phone number and email address.
“Targeted Advertising” means displaying to a consumer an advertisement that is selected based on Personal Information obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications, or online services to predict consumer preferences or interests. “Targeted Advertising” does not include the following:
“Profiling” means any form of automated processing of Personal Information to evaluate, analyze, or predict personal aspects concerning an identified or identifiable individual’s economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
“Relevant Data Privacy Law” means the specific data privacy law of the state of which a consumer is a resident: the Consumer Data Protection Act (“CDPA”) for a Virginia Consumer.
In the past twelve (12) months, Applecart has collected or processed the following categories of Personal Information regarding Covered Consumers:
Applecart obtains this Personal Information from the following types of sources: (a) publicly available government records, (b) information made freely available by individuals via a variety of online platforms, (c) information we acquire and gain rights to use through our contracted service providers, and (d) off-line freely available sources such as books and periodicals.
Applecart may use or disclose the Personal Information we collect for one or more of the following purposes(collectively for purposes of this Notice, the “Business Purposes”):
Unless we notify you otherwise, we will not collect additional categories of Personal Information, nor use the Personal Information we collect for any other materially different, unrelated, or incompatible purposes.
Applecart has disclosed your Personal Information as described in this Notice, including the following categories of information: identifiers (names, physical addresses, email addresses, phone numbers).
Applecart discloses Personal Information to third parties for a Business Purpose. When we disclose Personal Information for a Business Purpose, we enter into an agreement with the receiving party that describes the purpose for sharing the Personal Information, and that requires the receiving party to keep that Personal Information confidential.
We may disclose your Personal Information to the following categories of third parties: our service providers.
Applecart has not Sold any Personal Information about its Covered Consumers, processed Personal Information about its Covered Consumers for Targeted Advertising, or used Personal Information for the purpose of Profiling in furtherance of decisions that produce legal or similarly significant effects, all of the foregoing within the meaning of Relevant Data Privacy Law.
If you are a Covered Consumer, you may request information about our collection and processing of your Personal Information, whether or not it was collected electronically. If you submit a Verifiable Request, we will disclose whether we have collected or processed your Personal Information and allow you to access the Personal Information we have collected, to the extent we continue to retain the Personal Information. To the extent technically feasible, we will disclose this information to you in a readily usable format that allows you to transmit the data to another entity without hindrance.
With regard to a Verifiable Request to access, or receive a copy of, specific pieces of Personal Information we have collected about you, we reserve the right to further verify your identity by requiring you to compete a signed declaration which verifies that you are the consumer whose personal information is the subject of the Verifiable Request.
You also have the right to request that we delete any of your Personal Information that we collect or maintain by submitting a Verifiable Request. We may deny your deletion request if retaining your Personal Information is necessary for us or our service providers to:
If you are a Covered Consumer, you further have the right to request that we correct any of your Personal Information that is inaccurate by submitting a Verifiable Request. We will correct any inaccurate Personal Information pursuant to your request, taking into account the nature of the Personal Information and the purposes of the processing of your Personal Information. We may deny your correction request if the Personal Information is accurate.
If you choose to exercise a privacy right under the Relevant Data Privacy Law, you have the right not to receive unlawful discriminatory treatment.
You may submit a Verifiable Request for the information listed above, or exercise any of your rights enumerated under this Notice, by calling us at 1-866-I-OPT-OUT (1-866-467-8688) and entering service code 722# or by completing a form on our website at applecart.co/privacyrights. You may also submit a Verifiable Request on behalf of your minor child.
After we receive your Verifiable Request, we will provide to you, in writing and free of charge (unless your request is excessive, repetitive, or manifestly unfounded),the requested information. You can choose to have this information delivered to you by postal mail or electronically. We will try to respond to your verified request within forty-five (45) days of receipt, but if we require more time (up to another forty-five (45) days) we will inform you of the reason and extension period in writing. If we decline to act on your request for any reason permitted under the Relevant Data Privacy Law, we will notify you of our decision within forty-five (45) day of receiving your request. If applicable, our response will explain the reasons why we cannot comply with your request.
If we deny your request or fail to act on it within the required time period, you may have the right to appeal this decision by submitting a new Verifiable Request in which you conspicuously note that you are appealing a previous decision. If you are a Virginia resident, we will respond to your Verifiable Request to appeal within sixty (60) days of receipt. If applicable, our response will explain the reasons why we are denying your appeal, and any further steps that may be available to you.
Applecart does not and will not, without first obtaining your consent, process your Personal Information for Targeted Advertising, Profiling in furtherance of decisions that produce legal or similarly significant effects, and/or Sale to third parties.
Should you choose to exercise any of the rights enumerated under this Notice, we will not:
However, please be aware that it may be a functional necessity for our Services to have Personal Information about you in order to operate, and we may not be able to provide some or all of our Services to you if you direct us to delete your Personal Information.