Introduction
Under the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Virginia Consumer Data Protection Act (VCDPA), and Nevada Chapter 603A (N603), you have certain rights regarding your personal data.
This United States Regional Privacy Notice (“Notice”) supplements the Swash Privacy Policyto inform residents of California, Colorado, Connecticut, Nevada, and Virginia of their specific privacy rights and our responsibilities.
Certain laws, such as the Gramm-Leach-Bliley Act, Bank Secrecy Act, and the CCPA, may require us to retain certain data for recordkeeping purposes or to complete any transactions initiated before a change or deletion request. Additionally, some data may not be reviewable due to legal, security, or other reasons. For more information on our data practices, please refer to the Swash Privacy Policy.
California Consumer Privacy Rights
Under the CCPA, California residents have the following rights regarding their Personal Information:
Right of Access: Twice in a 12-month period, you can request that we disclose the following about you, limited to the preceding twelve (12) months:
The categories of Personal Information we collected about you;
The categories of sources from which the Personal Information is collected;
The business or commercial purpose for collecting or selling Personal Information;
The categories of third parties with whom we share Personal Information;
The specific pieces of Personal Information we have collected about you;
The categories of Personal Information disclosed for a business purpose or sold to third parties;
For each category of Personal Information identified, the categories of third parties to whom the information was disclosed or sold.
Right of Deletion: You can request that we delete any Personal Information we have collected from you, subject to certain legal exceptions.
Right to Opt-Out: You have the right to opt out of the sale of your Personal Information.
Right to Opt-In: Users must be over 18 to use our services. We do not knowingly collect, share, or sell Personal Information of minors.
Right to Limit Use and Disclosure of Sensitive Personal Information: You can request specific limitations on the use or disclosure of your Sensitive Personal Information for purposes outside those legally allowed. However, we do not process Sensitive Personal Information for this purpose.
Right to Correction: You can request that we correct any inaccuracies in your Personal Information.
Virginia Resident Privacy Rights
Under the VCDPA, Virginia residents have specific rights regarding their Personal Information, including:
Right to Access: Confirm whether we are processing your Personal Information and access such data;
Right to Correction: Correct inaccuracies in your Personal Information;
Right to Deletion: Request deletion of Personal Information, subject to legal exemptions;
Right to Obtain a Copy: Obtain a copy of your Personal Information;
Right to Opt-Out: Opt out of processing for targeted advertising, sale of Personal Information, or profiling in furtherance of decisions with legal or similarly significant effects.
Nevada Resident Privacy Rights
Under N603, Nevada residents have the right to request that we do not sell Personal Information we have about you or may collect in the future. You may also review and request changes to your collected personal information.
Colorado Resident Privacy Rights
Under the CPA, Colorado residents have specific rights regarding their Personal Information, including:
Right of Access: Confirm whether we are processing your Personal Information and access such information;
Right to Correction: Correct inaccuracies in your Personal Information;
Right to Deletion: Request deletion of Personal Information, subject to legal exemptions;
Right to Data Portability: Obtain a copy of your Personal Information in a portable, technically feasible, and readily usable format, up to twice per calendar year;
Right to Opt-Out: Opt out of processing for targeted advertising, sale of Personal Information, or profiling in furtherance of decisions with legal or similarly significant effects.
Connecticut Resident Privacy Rights
Under the CTDPA, Connecticut residents have specific rights regarding their Personal Information, including:
Right of Access: Confirm whether we are processing your Personal Information and access such information;
Right to Correction: Correct inaccuracies in your Personal Information;
Right to Deletion: Request deletion of Personal Information, subject to legal exemptions;
Right to Data Portability: Obtain a copy of your Personal Information in a portable, technically feasible, and readily usable format;
Right to Opt-Out: Opt out of processing for targeted advertising, sale of Personal Information, or profiling in furtherance of automated decisions with legal or similarly significant effects.
Consumer Requests
To submit a request to exercise your rights, and as applicable, to appeal a consumer rights action, please visit this webform.
Right to Non-Discrimination
Swash will not discriminate against you for exercising any of your rights, including, but not limited to:
Denying goods or services to you;
Charging different prices or rates for goods or services, including through discounts or other benefits or imposing penalties;
Providing a different level or quality of goods or services to you;
Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
Identity Verification for Consumer Requests
To protect your identity and account security, Swash will require you to undergo identity verification before processing your request. We will attempt to comply with your request as soon as reasonably practicable and consistent with applicable law, notifying you if additional time is needed to verify your information.
Authorised Agents
You may designate an authorised agent to request any of the above rights on your behalf by providing the agent with written permission, signed by you, to act on your behalf.
Virginia, Colorado, and Connecticut Appeal Processes
If we decline to take action on your request to access, correct, or delete your Personal Information under VCDPA, CPA, or CTDPA, you may appeal our decision within 45 days of the denial.
Data Rectification
Update your information by accessing the Settings > Data & ads controls within the app to update your account data if it is not accurate.
