The source policy says residents of California, Connecticut, Colorado, Utah, and Virginia are granted specific rights regarding access to personal information.
What categories of personal information do we collect? The published policy lists the following categories and marks them as not collected in the prior twelve months.
| Category |
Examples |
Collected |
| A. Identifiers |
Real name, alias, postal address, phone number, online identifier, IP address, email address, account name |
No |
| B. California Customer Records personal information |
Name, contact information, education, employment, employment history, financial information |
No |
| C. Protected classification characteristics |
Gender and date of birth |
No |
| D. Commercial information |
Transaction information, purchase history, financial details, payment information |
No |
| E. Biometric information |
Fingerprints and voiceprints |
No |
| F. Internet or similar network activity |
Browsing history, search history, behavior, interest data, interactions with websites, apps, systems, and ads |
No |
| G. Geolocation data |
Device location |
No |
| H. Audio, electronic, visual, thermal, olfactory, or similar information |
Images and audio, video, or call recordings created in connection with business activities |
No |
| I. Professional or employment-related information |
Business contact details, job title, work history, professional qualifications |
No |
| J. Education information |
Student records and directory information |
No |
| K. Inferences drawn from collected personal information |
Profiles or summaries about preferences and characteristics |
No |
| L. Sensitive personal information |
Sensitive personal information |
No |
The source policy also notes that other personal information may be collected in support, surveys, contests, service delivery, or response-to-inquiry contexts, and that Category B is not collected.
The policy says FAMRO has not disclosed, sold, or shared personal information to third parties for business or commercial purposes in the preceding twelve months, and says it will not sell or share personal information in the future belonging to visitors, users, and consumers.
California Residents
California Civil Code Section 1798.83 permits California residents to request, once per year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes and the names and addresses of those third parties. California residents under age 18 with a registered account may also request removal of publicly posted data, subject to system and backup limitations.
CCPA Privacy Notice
The source policy says California residents may have the rights to request deletion, request to know whether personal information is collected and used, understand the categories and purposes involved, know whether data is sold or shared, and request the specific pieces of personal information collected about them.
- Right to request deletion.
- Right to be informed and request to know.
- Right to non-discrimination for exercising privacy rights.
- Right to limit use and disclosure of sensitive personal information, which the policy says FAMRO does not process.
- Right to object, request correction, restrict processing, designate an authorized agent, and opt out of future selling or sharing.
The policy says verification may require information that matches existing records and that additionally provided information used for verification will be deleted when verification is complete.
Requests can be made using the contact details listed in the policy or by visiting the contact page.
Colorado Residents
Under the Colorado Privacy Act, the source policy lists the rights to be informed, access personal data, correct inaccuracies, request deletion, obtain a copy of previously shared personal data, and opt out of targeted advertising, sale of personal data, or qualifying profiling. Appeals may be sent using the contact details listed in the policy, and the policy says responses will be provided within forty-five days.
Connecticut Residents
Under the Connecticut Data Privacy Act, the published policy lists the rights to be informed, access personal data, correct inaccuracies, request deletion, obtain a copy of previously shared personal data, and opt out of targeted advertising, sale, or profiling. Appeals may be sent using the contact details listed in the policy, and the policy says responses will be provided within sixty days.
Utah Residents
Under the Utah Consumer Privacy Act, the source policy lists the rights to be informed, access personal data, request deletion, obtain a copy of previously shared personal data, and opt out of targeted advertising or sale of personal data. Requests may be sent using the contact details listed in the policy.
Virginia Residents
Under the Virginia Consumer Data Protection Act, the source policy defines "consumer," "personal data," and "sale of personal data," then lists the rights to be informed, access personal data, correct inaccuracies, request deletion, obtain a copy of previously shared personal data, and opt out of targeted advertising, sale, or profiling.
The policy says FAMRO may request information reasonably necessary to verify the requester and will respond without undue delay, within forty-five days, with one additional forty-five-day extension possible when reasonably necessary.
If an appeal is denied, the policy says a complaint may be submitted to the Virginia Attorney General.
