11. ELIGIBILITY AND CHILDREN'S PRIVACY
Our Services are not designed for use by children (for the purposes of this section, "child" refers to the age defined by applicable law; for the EEA, this is under 16 years old, for the US, under 13 years old, and for Turkey, under 18 years old), and we do not knowingly process information from children. If we discover that we have received information from a user that is deemed to be from a "child," we will immediately delete the information. If you have reason to believe that a child has shared information with us, please contact us at contact@mudjik.com.

​

b. PRIVACY NOTICES SPECIFIC TO THE US JURISDICTION:
NOTICE FOR CALIFORNIA RESIDENTS This section applies only to residents of California and is governed by the California Consumer Privacy Act ("CCPA"), which took effect in November 2020, and as amended by the California Privacy Rights Act, effective January 1, 2023. Please review the CCPA Notice, which explains the categories of personal information we collect, the purpose for processing, the source, the categories of recipients with whom personal information is shared for business purposes, whether the personal information is sold or shared, the retention period, and how you can exercise your rights as a California resident.

2. ADDITIONAL NOTICE TO COLORADO RESIDENTS
Under the Colorado Privacy Act ("CPA"):
The term “Personal Data” refers to "information that is linked or reasonably linkable to an identified or identifiable individual" and does not include the following: publicly available information, de-identified or aggregated consumer information, and information outside the scope of the CPA. Examples of excluded information include health or medical information under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or 42 CFR Part 2 – "Confidentiality of Substance Use Disorder Patient Records," personal data covered by sector-specific privacy laws such as the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA), the Driver’s Privacy Protection Act of 1994, the Children’s Online Privacy Protection Act of 1998 (COPPA), the Family Educational Rights and Privacy Act of 1974, the Securities Exchange Act of 1934, data related to higher education, and employment data.

“Sensitive Data” includes:
(i) racial or ethnic origin, religious beliefs, mental or physical health conditions or diagnoses, sexual life or sexual orientation;
(ii) genetic or biometric data processed for the purpose of uniquely identifying an individual; or
(iii) data concerning children.
We do not process or collect sensitive data.

In Section I.3 “Information We Collect and Purpose of Collection” of our Privacy Policy, we describe the collection and processing of Personal Data, the categories of Personal Data collected or processed, and the purposes of such collection. Section I.6 “Data Sharing – Categories of Recipients With Whom We Share Personal Data” details the categories of third parties with whom we share Personal Data for business purposes. Further information about your privacy rights and how to exercise them is explained in Section I.10 “Privacy Rights.”

How to Submit a Request Under the CPA?
You or someone legally authorized to act on your behalf may submit a request to access or delete your Personal Data. If a request is submitted by someone other than the consumer about whom the information pertains, proof of authorization (e.g., a power of attorney or legal documents) will be required.
We will respond to a verifiable consumer request within 45 days of receipt, with a maximum of two responses in a twelve-month period. We reserve the right to extend the response period by an additional 45 days when reasonably necessary and will notify you of such an extension within the initial 45-day period. If we deny your request, you have the right to appeal our decision. You may file an appeal by contacting us at contact@mudjik.com and indicating your intention to appeal. We will provide a written response to your appeal within 60 days of receipt, including an explanation of any actions taken or not taken and the reasons for the decision. If your appeal is denied, you may file a complaint with the Colorado Attorney General at https://coag.gov/file-complaint/.
If you have an account with us, we will deliver our written response to that account or, at our discretion, via email. If you do not have an account with us, we will deliver our written response either by mail or electronically, based on your preference. You are not required to create an account to submit a request.
The disclosures we provide will only cover the twelve-month period preceding our receipt of your request. Our response will also explain any reasons why we cannot comply with a request, if applicable.

3. ADDITIONAL NOTICE TO VIRGINIA RESIDENTS
Under the Virginia Consumer Data Protection Act, as amended ("VCDPA"), if you are a Virginia resident acting in an individual or household context (and not in an employment or commercial context), you have the following rights regarding your Personal Data.
The term “Personal Data” refers to any information that is linked or reasonably linkable to an identified or identifiable natural person. "Personal Data" does not include de-identified data or publicly available information. It also excludes information regulated by laws such as HIPAA, GLBA, nonprofit organizations, higher education, employment data, and other exempted categories such as data under the Fair Credit Reporting Act (FCRA), the Driver’s Privacy Protection Act of 1994, the Family Educational Rights and Privacy Act, and the Farm Credit Act.

The VCDPA requires us to disclose:
The categories of data we process and the purposes for each category, as detailed in Section I.3 “Information We Collect and Purpose of Collection” of this Privacy Policy; and
The third parties with whom we share Personal Data, as detailed in Section I.6 “Data Sharing – Categories of Recipients With Whom We Share Personal Data.”
Additionally, Section I.10 “Privacy Rights” of this Privacy Policy details your rights under the VCDPA and how to exercise those rights.

How to Submit a Request Under the VCDPA?
We will respond to your request within 45 days of receipt. If reasonably necessary, we reserve the right to extend the response time by an additional 45 days, provided we notify you of the extension within the initial 45-day period. If we deny your request, you have the right to appeal our decision by contacting us at contact@mudjik.com and indicating your intention to appeal. We will provide a written response to your appeal within 60 days of receipt, including an explanation of any actions taken or not taken and the reasons for the decision.
If your appeal is denied, you may file a complaint with the Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform.
We will provide the requested information free of charge up to twice annually. However, we may charge a fee for requests that are manifestly unfounded, excessive, or repetitive. If we are unable to verify your identity using commercially reasonable efforts, we may request additional information reasonably necessary to verify you and your request. If we cannot verify you or your request, we will not be able to fulfill your request.

4. ADDITIONAL NOTICE TO CONNECTICUT RESIDENTS
Under the Connecticut Data Privacy Act, Public Act No. 22-14 (“CDPA”), if you are a Connecticut resident acting in an individual or household context (and not in a commercial or employment context or as a representative of a business, nonprofit, or governmental entity), your rights regarding your personal data are described below.
The term “Personal Data” refers to any information that is linked or reasonably linkable to an identified or identifiable individual. It does not include de-identified data or publicly available information. It also excludes information regulated by laws such as HIPAA, GLBA, nonprofit organizations, higher education, employment data, and other exempted categories such as data under the Fair Credit Reporting Act (FCRA), the Driver’s Privacy Protection Act of 1994, the Family Educational Rights and Privacy Act, and the Farm Credit Act.
The categories of personal data processed and the purposes for processing are detailed in Section I.3 “Information We Collect and Purpose of Collection” of this Privacy Policy. The categories of personal data shared with third parties and the categories of third parties with whom data is shared are detailed in Section I.6 “Data Sharing – Categories of Recipients With Whom We Share Personal Data.”
Information about your rights and how to exercise them is provided in Section I.10 “Privacy Rights.”

How to Submit a Request Under the CDPA?
We will respond to your request within 45 days of receipt. If reasonably necessary, considering the complexity and number of requests, and if we notify you of the extension within the initial 45-day period, we may extend the response time once by an additional 45 days.
If we deny your request, we will inform you without undue delay, and no later than 45 days after receipt of your request. This notification will include the reason for the denial and instructions on how to appeal our decision. We will respond to your appeal within 60 days of receipt, providing a written explanation of any actions taken or not taken in response to the appeal and the reasons for our decision.
If your appeal is denied, you may file a complaint with the Connecticut Attorney General at https://www.dir.ct.gov/ag/complaint/ or by calling (860) 808-5318.
We will provide information in response to your requests free of charge up to twice annually. However, we may charge a fee if the requests are manifestly unfounded, excessive, or repetitive. If we are unable to verify your identity using commercially reasonable efforts, we may request additional information reasonably necessary to verify you and your request. If we cannot verify you or your request, we will not be able to fulfill it.

5. ADDITIONAL NOTICE TO UTAH RESIDENTS
Under the Utah Consumer Privacy Act (“UCPA”), if you are a Utah resident acting in an individual or household context (and not in a commercial or employment context), your rights regarding your personal data are outlined below.
The term “Personal Data” refers to data linked or reasonably linkable to an identified or identifiable individual. It does not include de-identified data or publicly available information.
The categories of personal data processed and the purposes for processing are detailed in Section I.3 “Information We Collect and Purpose of Collection” of this Privacy Policy. The categories of personal data shared with third parties and the categories of third parties with whom data is shared are detailed in Section I.6 “Data Sharing – Categories of Recipients With Whom We Share Personal Data.”
Information about your rights and how to exercise them is provided in Section I.10 “Privacy Rights.”

6. NOTICE TO NEVADA RESIDENTS
Nevada law allows Nevada residents to opt out of the sale of certain types of personal information. Subject to a few exceptions, Nevada law defines “sale” as the exchange of specific types of personal information for monetary consideration with another party.
Currently, we do not sell personal information as defined by Nevada law. However, if you are a Nevada resident, you may submit a verified request to opt out of sales, and we will record your instructions to apply them in the event of a future policy change.
To submit an opt-out request, please contact us at contact@mudjik.com.