Privacy Policy
Last Updated: May 28, 2026
This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service, and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. This Privacy Policy describes how Denver Modern collects, uses, and shares information when You visit or make purchases from our website. Your consent to non-essential data collection is obtained separately through our Cookie Banner, as described below.
- Tracking Technologies, Pixels, and Session Recording
- Interpretation and Definitions
- Collecting and Using Your Personal Data
- Third-Party Services and Data Sharing
- SMS / Text Message Marketing
- Sensitive Personal Information
- Your US State Privacy Rights
- California Invasion of Privacy Act (CIPA)
- CCPA Privacy (California Residents)
- GDPR Privacy (EU / UK / EEA Residents)
- Facebook Fan Page
- "Do Not Track" Policy (CalOPPA)
- Children's Privacy
- California Shine the Light
- California Privacy Rights for Minor Users
- Links to Other Websites
- Changes to This Privacy Policy
- Contact Us
Tracking Technologies, Pixels, and Session Recording (Notice at Collection & CIPA Notice)
When You visit, browse, or interact with our Service, We and our service providers use cookies, pixels, tags, software development kits (SDKs), web beacons, server-side tracking, and session-recording technologies ("Tracking Technologies") to collect information about Your device, Your browser, Your interactions with our website, and the content You view or submit. These Tracking Technologies may record, in whole or in part:
- Pages You visit and the time spent on each page;
- Clicks, mouse movements, scrolling, taps, and keystrokes (excluding fields We mask, such as password and payment fields);
- Search queries, filters, and free-text You enter into search bars, chat windows, contact forms, and product reviews;
- Items You add to Your cart, wishlist, or purchase;
- Your IP address, approximate location, device identifiers, browser type, operating system, and referral source;
- Communications You initiate with Us through on-site chat, video, or messaging features.
By clicking 'Accept' or 'Accept All' on our Cookie Banner, You consent to the recording, interception, capture, storage, and sharing of Your interactions with our website by Us and our third-party service providers as described in this Privacy Policy. This consent is provided for purposes of, and satisfies, the prior-consent requirement of the California Invasion of Privacy Act (Cal. Penal Code §§ 630–638), including its provisions related to wiretapping, eavesdropping, and pen registers / trap-and-trace devices, as well as analogous laws in other states. You may withdraw this consent at any time by adjusting Your cookie preferences, clicking the "Do Not Sell or Share My Personal Information" link, enabling Global Privacy Control (GPC) in Your browser, or contacting Us using the information at the end of this Policy.
We conduct quarterly audits of our Tracking Technology implementations to verify that consent signals are being honored correctly and that no tracking fires prior to consent for visitors from jurisdictions requiring opt-in consent, including through server-side consent enforcement via our tag management infrastructure, to ensure compliance with opt-in and opt-out signals, including Global Privacy Control.
We use a third-party consent management platform (CMP) to display the Cookie Banner, to record Your consent choices, and to apply those choices across our Service. The CMP stores a consent record (including a timestamp, the categories You accepted or declined, and a unique consent identifier) so that We can demonstrate Your choices if required by law or regulation. You may request a copy of Your consent record at any time by emailing [email protected].
What Happens If You Decline Non-Essential Cookies
If You decline non-essential cookies:
- Core website functionality, product browsing, cart, and checkout remain fully available.
- You will not receive personalized advertisements from Denver Modern on other websites.
- Session recording, behavioral analytics (Microsoft Clarity, Noibu), and advertising retargeting pixels will not fire during Your visit.
- Essential cookies for cart, account, and fraud prevention will continue to function regardless of Your consent choice.
If You do not consent to these Tracking Technologies, please exit the website or decline non-essential cookies in our Cookie Banner before continuing to use the Service.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Business, for the purpose of the CCPA, refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of the processing of Consumers' personal information, that does business in the State of California.
- Company (referred to as either "the Company," "Denver Modern," "We," "Us," or "Our") refers to Denver Modern, LLC, 3857 Steele Street, Suite 1287, Denver, CO 80205, together with its officers, employees, affiliates, successors, and assigns. For purposes of the GDPR, the Company is the Data Controller. For purposes of the Colorado Privacy Act, Virginia Consumer Data Protection Act, and similar US state privacy laws, the Company is the "Controller."
- Consumer, for the purpose of the CCPA, means a natural person who is a California resident. Residents of other US states may be "Consumers" under their own state privacy laws.
- Cookie Banner means the consent management interface displayed on the Service that allows You to accept, decline, or customize the use of cookies and Tracking Technologies.
- Cookies are small files that are placed on Your computer, mobile device, or any other device by a website, containing the details of Your browsing history on that website among its many uses.
- Country refers to: Colorado, United States.
- Data Controller, for the purposes of the GDPR, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
- Device means any device that can access the Service, such as a computer, a cellphone, or a digital tablet.
- Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
- Facebook Fan Page is a public profile named Denver Modern specifically created by the Company on the Facebook social network, accessible from facebook.com/thedenvermodern.
- Global Privacy Control (GPC) means a browser-based signal that communicates a consumer's preference to opt out of the sale or sharing of Personal Data and processing for targeted advertising.
- Personal Data (also "Personal Information") is any information that relates to an identified or identifiable individual. For GDPR, this includes a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity. For CCPA and other US state privacy laws, Personal Data means any information that identifies, relates to, describes, or is capable of being associated with, or could reasonably be linked, directly or indirectly, with You or Your household.
- Sale (and "Sell") has the meaning given under the CCPA, the Colorado Privacy Act, and similar state privacy laws.
- Sensitive Personal Information generally includes precise geolocation, racial or ethnic origin, religious beliefs, health information, biometric or genetic data for identification purposes, and sexual orientation, among other categories.
- Service refers to the Website, all subdomains, mobile-optimized pages, checkout pages, customer account pages, email and SMS communications We send, and any related online services or features We provide.
- Service Provider means any natural or legal person who processes the data on behalf of the Company. For the purposes of the GDPR and US state privacy laws, Service Providers are considered "Processors."
- Share (and "Sharing") has the meaning given under the CCPA/CPRA and similar state laws, and generally includes the transfer of Personal Data to a third party for cross-context behavioral advertising.
- Third Party has the meaning given under applicable US state privacy laws.
- Tracking Technologies has the meaning set forth in the "Tracking Technologies, Pixels, and Session Recording" section above.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
- Website refers to Denver Modern, accessible from denvermodern.com.
- You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service. Under GDPR, You can be referred to as the Data Subject or as the User. Under CCPA/CPRA, "You" includes a "Consumer" who is a California resident.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Usage Data
In addition, You agree to our Messaging Terms.
Usage Data
Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device's Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers, and other diagnostic data.
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
Tracking Technologies and Cookies
We use Cookies and similar Tracking Technologies to track activity on Our Service and store certain information. Tracking Technologies used include beacons, tags, pixels, session-recording scripts, server-side event collection, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:
- Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.
- Flash Cookies. Certain features of our Service may use local stored objects (or Flash Cookies) to collect and store information about Your preferences or Your activity on our Service. For more information, see Adobe's Flash help page.
- Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company to count users who have visited those pages or opened an email and for other related website statistics.
- Session-Recording & Heatmap Tools. Certain third-party services (such as Microsoft Clarity and Noibu) record Your interactions with our Service — including mouse movements, clicks, scrolls, and page navigations — to help Us understand how visitors use the Service and diagnose errors. We use reasonable efforts to mask or exclude sensitive fields (such as password and payment fields) from these recordings.
- Advertising & Retargeting Pixels. Third-party advertising platforms (such as Meta, Google, TikTok, Pinterest, Microsoft, MNTN, Northbeam, and others) place pixels on our Service that allow them to recognize Your Device across websites and serve You advertisements based on Your interests.
- Server-Side / First-Party Tracking. Certain providers (such as Blotout EdgeTag and Opensend) use server-to-server event collection and first-party identifiers to link Your interactions across sessions and devices.
Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. We use both Session and Persistent Cookies for the purposes set out below:
Necessary / Essential Cookies
Type: Session Cookies. Administered by: Us. Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.
Cookies Policy / Notice Acceptance Cookies
Type: Persistent Cookies. Administered by: Us. Purpose: These Cookies identify if users have accepted the use of cookies on the Website.
Functionality Cookies
Type: Persistent Cookies. Administered by: Us. Purpose: These Cookies allow Us to remember choices You make when You use the Website, such as remembering Your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter Your preferences every time You use the Website.
Tracking and Performance Cookies
Type: Persistent Cookies. Administered by: Third-Parties. Purpose: These Cookies are used to track information about traffic to the Website and how users use the Website. The information gathered via these Cookies may directly or indirectly identify You as an individual visitor. We may also use these Cookies to test new pages, features, or new functionality of the Website to see how our users react to them.
Targeting and Advertising Cookies
Type: Persistent Cookies. Administered by: Third-Parties. Purpose: These Cookies track Your browsing habits to enable Us to show advertising which is more likely to be of interest to You. These Cookies use information about Your browsing history to group You with other users who have similar interests.
You may manage Your preferences for non-essential Cookies and Tracking Technologies at any time through our Cookie Banner or the "Cookie Preferences" / "Do Not Sell or Share My Personal Information" link in the website footer.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including to monitor the usage of our Service.
- To manage Your Account: to manage Your registration as a user of the Service.
- For the performance of a contract: the development, compliance, and undertaking of the purchase contract for the products, items, or services You have purchased or of any other contract with Us through the Service.
- To contact You: by email, telephone calls, SMS, or other equivalent forms of electronic communication regarding updates or informative communications related to the functionalities, products, or contracted services, including security updates, when necessary or reasonable for their implementation.
- To provide You with news, special offers, and general information about other goods, services, and events which We offer that are similar to those that You have already purchased or enquired about, unless You have opted not to receive such information.
- To manage Your requests: To attend to and manage Your requests to Us.
- To deliver targeted advertising to You.
- For business transfers: to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets.
- For other purposes: such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Service, products, services, marketing, and Your experience.
We may share Your Personal Data in the following situations:
- With Service Providers to monitor and analyze the use of our Service, to show advertisements to You, to support and maintain Our Service, to advertise on third-party websites, for payment processing, and to contact You.
- For business transfers, in connection with any merger, sale of Company assets, financing, or acquisition.
- With Affiliates, who will be required to honor this Privacy Policy.
- With business partners to offer You certain products, services, or promotions.
- With other users, when You share Personal Data or otherwise interact in the public areas with other users.
- With Your consent, for any other purpose.
Retention of Your Personal Data
We retain Personal Data only for as long as is reasonably necessary for the purposes described in this Policy, including to provide the Service, comply with Our legal obligations, resolve disputes, and enforce Our agreements. Typical retention periods:
- Order and transaction data: 7 years (tax and accounting requirements);
- Customer accounts: For the life of the account plus 2 years of inactivity;
- Marketing contacts: Until You opt out, plus a short suppression-list retention to honor Your opt-out;
- Analytics and advertising data: Generally 14–26 months, per provider defaults;
- Session recordings (e.g., Microsoft Clarity, Noibu): Generally 30–90 days.
We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.
Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This information may be transferred to — and maintained on — computers located outside of Your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.
Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law Enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Other Legal Requirements
The Company may disclose Your Personal Data in the good-faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
Security of Your Personal Data
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Third-Party Services and Data Sharing
We share or make available certain Personal Data with the third-party service providers listed below. Each provider acts as either a "Service Provider" / "Processor" or, where required, as a Third Party to whom data is "Sold" or "Shared" for cross-context behavioral advertising. You may opt out of "Sale" and "Sharing" by clicking "Do Not Sell or Share My Personal Information" in the website footer.
| Category | Service Provider | Purpose | Data Shared |
|---|---|---|---|
| Analytics & Performance | Google Analytics / Google Tag Manager | Website usage analytics, conversion measurement | Usage data, device and browser data, IP address, page interactions |
| Analytics & Performance | Microsoft Clarity | Session recording, heatmaps, behavioral analytics | Mouse movements, clicks, scrolls, page interactions, device data, IP address |
| Advertising & Retargeting | Meta (Facebook & Instagram) | Advertising, retargeting, conversion tracking, aggregated conversion modeling | Page views, events, hashed contact data, device identifiers. For visitors who decline marketing cookies, server-side events may still be transmitted to Meta using privacy-preserving parameters (opt_out signal) for aggregated conversion modeling only, without enabling user-level ad personalization or retargeting. No personal identifiers are included in these transmissions. |
| Advertising & Retargeting | Google & YouTube Ads | Advertising, retargeting, conversion tracking | Page views, events, hashed contact data, device identifiers |
| Advertising & Retargeting | TikTok | Advertising, retargeting, conversion tracking | Page views, events, hashed contact data, device identifiers |
| Advertising & Retargeting | Advertising, retargeting, conversion tracking | Page views, events, hashed contact data, device identifiers | |
| Advertising & Retargeting | Microsoft Advertising (Bing Ads) | Advertising and conversion tracking on Bing/Microsoft properties | Page views, events, hashed contact data, device identifiers |
| Advertising & Retargeting | MNTN | Connected-TV and programmatic advertising | Audience data, device identifiers, conversion events |
| First-Party / Server-Side | Blotout EdgeTag | First-party server-side event collection and identity stitching | Event data, hashed identifiers, IP address, device data |
| First-Party / Server-Side | Opensend | Visitor identification and email retargeting. Opensend's services operate only for visitors who have provided prior consent (California residents) or who have not opted out (all other jurisdictions). No visitor identification or email retargeting occurs for California visitors who decline non-essential cookies or who have enabled GPC. | IP-based identifiers, hashed email, and browsing behavior |
| Email & SMS Marketing | Klaviyo | Email and SMS marketing, transactional messaging, customer profiles | Name, email, phone, order history, on-site behavior, marketing consents |
| Email & SMS Marketing | Alia | On-site email/SMS capture and gamified engagement | Email, phone, on-site interactions |
| Personalization & Experimentation | Intelligems A/B Testing | Price testing, content experimentation, personalization | Session data, device identifiers, experiment assignments |
| Personalization & Experimentation | Tolstoy | Interactive video and shoppable video | Video interaction events, device data |
| Personalization & Experimentation | Wishlist Plus | Wishlist functionality | Customer ID, product interactions, email |
| Affiliate & Creator | Shopify Collabs | Influencer/affiliate partnerships and attribution | Order data, referral identifiers |
| Affiliate & Creator | Rakuten Affiliate Tracking | Affiliate marketing attribution | Order data, click identifiers |
| Security & Support | Google reCAPTCHA | Bot detection and fraud prevention | Device data, IP address, interaction signals |
| Security & Support | Google Places | Address lookup and autocomplete | Location input, IP address |
| Security & Support | Gorgias | Customer support ticketing | Contact information, support inquiries |
| Payments | Shopify Payments, PayPal, Apple Pay, Google Pay, and other processors | Payment processing, fraud prevention | Name, billing/shipping address, payment card or account details, order data |
| Consent Management | Pandectes | Display Cookie Banner, record and enforce consent preferences, honor Global Privacy Control | Consent choices, consent timestamp, IP address, browser fingerprint, consent ID |
This list may change from time to time as We add, replace, or remove Service Providers. The most current list will always be available in this Policy.
Privacy information for the providers above:
- Google: policies.google.com/privacy
- Microsoft: privacy.microsoft.com
- Meta: facebook.com/privacy/explanation
- TikTok: tiktok.com/legal/privacy-policy
- Pinterest: about.pinterest.com
- Klaviyo: klaviyo.com/legal
- Rakuten Advertising: rakutenadvertising.com
- PayPal: paypal.com/privacy-full
- Shopify Payments: shopify.com/legal/privacy
- Gorgias: gorgias.com/legal/privacy
SMS / Text Message Marketing
If You provide Your mobile number and consent to receive text messages from Us (through Klaviyo, Alia, or similar providers), We may send You marketing, promotional, cart-recovery, and transactional messages. Message and data rates may apply. Message frequency varies. Reply STOP to unsubscribe at any time. Reply HELP for help. Carriers are not liable for delayed or undelivered messages. Your mobile information will not be sold or shared with third parties for their own marketing purposes.
Sensitive Personal Information
We do not knowingly collect or process Sensitive Personal Information (as defined under CCPA, CPA, VCDPA, and similar laws) — such as precise geolocation, racial or ethnic origin, religious beliefs, health information, biometric or genetic data, or sexual orientation — for purposes of inferring characteristics about You. If We collect any data that may be considered sensitive (e.g., approximate location derived from IP address), We use it only for the purposes of providing the Service, fraud prevention, and security, and not for targeted advertising or Sale.
Your US State Privacy Rights
Depending on the US state in which You reside, You may have additional rights regarding Your Personal Data. As of the date of this Policy, the following US states have comprehensive consumer privacy laws granting some or all of the rights described below: California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Iowa (ICDPA), Indiana, Tennessee, Montana, Oregon, Texas (TDPSA), Delaware, New Hampshire, New Jersey, Kentucky, Maryland, Minnesota, Rhode Island, Nebraska, and Florida (FDBR, narrower scope). Residents of additional states may have similar rights as new laws take effect.
Subject to verification of Your identity and certain legal exceptions, You generally have the right to:
- Know / Access the categories and specific pieces of Personal Data We have collected about You;
- Correct inaccurate Personal Data;
- Delete Personal Data We have collected from You;
- Portability — receive a copy of Your Personal Data in a portable format;
- Opt out of "Sale" or "Sharing" of Personal Data and of processing for targeted advertising;
- Opt out of profiling that produces legal or similarly significant effects;
- Limit the use of Sensitive Personal Information;
- Appeal a denial of any of these requests (in states that require an appeals process);
- Be free from discrimination for exercising any of these rights.
How to Exercise Your Rights
You may submit a request by:
- Clicking "Do Not Sell or Share My Personal Information" in our website footer;
- Adjusting Your cookie preferences in our Cookie Banner;
- Emailing [email protected] with the subject line "Privacy Request"; or
- Writing to Denver Modern, LLC, 3857 Steele Street, Suite 1287, Denver, CO 80205.
Universal Opt-Out / Global Privacy Control
We honor browser-based opt-out signals such as Global Privacy Control (GPC) as a valid request to opt out of the Sale and Sharing of Personal Data and of processing for targeted advertising, as required by the California Consumer Privacy Act, the Colorado Privacy Act, Connecticut Data Privacy Act, and other state laws that recognize universal opt-out mechanisms.
Authorized Agents
You may designate an authorized agent to make a request on Your behalf. We may require the agent to provide proof of authorization and may require You to verify Your own identity directly.
Appeals
If We decline to act on Your request, You may appeal Our decision by replying to Our response or contacting Us at [email protected] with "Privacy Appeal" in the subject line. We will respond within the timeframe required by Your state's law. If Your appeal is denied, You may contact Your state Attorney General.
California Invasion of Privacy Act (CIPA)
The California Invasion of Privacy Act (Cal. Penal Code §§ 630–638) generally prohibits the recording or interception of communications without the consent of all parties. We use the third-party technologies listed in the "Tracking Technologies, Pixels, and Session Recording" and "Third-Party Services and Data Sharing" sections above to collect information about Your interactions with our website, including session-recording, analytics, advertising pixels, and server-side event collection.
By clicking 'Accept All' on our Cookie Banner, You expressly consent, on behalf of Yourself and any other party to Your communications with our website, to the recording, interception, capture, storage, analysis, and sharing of those communications by Us and our service providers, including for purposes of analytics, fraud prevention, advertising, attribution, and personalization. This consent is intended to satisfy the "prior consent" requirement under CIPA and any similar state wiretap or eavesdropping statute.
You may withdraw consent at any time by:
- Clicking "Reject All" or adjusting Your preferences in our Cookie Banner;
- Enabling Global Privacy Control (GPC) in Your browser;
- Clicking "Do Not Sell or Share My Personal Information" in the website footer; or
- Emailing [email protected].
If You do not consent, please discontinue use of the Service.
CCPA Privacy (California Residents)
This CCPA Privacy section for California residents supplements the information contained in Our Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California.
Categories of Personal Information Collected
The following categories are those defined in the CCPA. This does not mean all examples were collected, but reflects our good-faith belief that some information from the applicable category may have been collected.
- Category A: Identifiers. Collected: Yes.
- Category B: California Customer Records (Cal. Civ. Code § 1798.80(e)). Collected: Yes.
- Category C: Protected classification characteristics. Collected: No.
- Category D: Commercial information. Collected: Yes.
- Category E: Biometric information. Collected: No.
- Category F: Internet or other similar network activity. Collected: Yes.
- Category G: Geolocation data. Collected: No (beyond approximate location derived from IP address, used for fraud prevention and service delivery only).
- Category H: Sensory data. Collected: No.
- Category I: Professional or employment-related information. Collected: No.
- Category J: Non-public education information. Collected: No.
- Category K: Inferences drawn from other personal information. Collected: Yes (for marketing personalization and product recommendations).
Under CCPA, personal information does not include publicly available information from government records, deidentified or aggregated consumer information, or information excluded from the CCPA's scope (such as HIPAA/CMIA-covered health data, FRCA, GLBA, FIPA, and Driver's Privacy Protection Act data).
Sources of Personal Information
- Directly from You (forms, preferences, purchases).
- Indirectly from You (observing Your activity on our Service).
- Automatically from You (cookies, pixels, and Tracking Technologies).
- From Service Providers (analytics, advertising, payment processing, etc.).
Use of Personal Information for Business or Commercial Purposes
- To operate our Service and provide You with our Service.
- To provide You with support and to respond to Your inquiries.
- To fulfill or meet the reason You provided the information.
- To respond to law enforcement requests and as required by applicable law.
- As described to You when collecting Your personal information or as otherwise set forth in the CCPA.
- For internal administrative and auditing purposes.
- To detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity.
Disclosure of Personal Information for Business or Commercial Purposes
We may use or disclose — and may have used or disclosed in the last twelve (12) months — the following categories of personal information for business or commercial purposes: Category A (Identifiers), Category B (California Customer Records), Category D (Commercial information), Category F (Internet or other similar network activity), and Category K (Inferences). When We disclose personal information for a business purpose, We enter a contract that requires the recipient to keep that personal information confidential and not use it for any purpose except performing the contract.
Sale and Sharing of Personal Information
Because We use third-party advertising and analytics pixels, some of Our data practices may constitute a Sale or Share under California law. We may Sell or Share the following categories: Category A (Identifiers), Category B (California Customer Records), Category D (Commercial information), Category F (Internet or other similar network activity), and Category K (Inferences). You may opt out by clicking "Do Not Sell or Share My Personal Information" in our website footer, by adjusting Your cookie preferences, or by enabling GPC.
Sale of Personal Information of Minors Under 16 Years of Age
We do not Sell or Share the personal information of Consumers We actually know are less than 16 years of age, unless We receive affirmative authorization (the "right to opt-in") from either the Consumer who is between 13 and 16 years of age, or the parent or guardian of a Consumer less than 13 years of age.
Your Rights under the CCPA/CPRA
If You are a California resident, You have the rights set forth in the "Your US State Privacy Rights" section above, including the right to know, access, delete, correct, port, limit the use of Sensitive Personal Information, opt out of Sale and Sharing, and not be discriminated against for exercising Your rights.
Exercising Your CCPA Data Protection Rights
To exercise any of Your rights under the CCPA/CPRA, You may contact Us using the methods in the "How to Exercise Your Rights" section above. Only You, or a person registered with the California Secretary of State that You authorize to act on Your behalf, may make a verifiable request related to Your personal information. Your request must:
- Provide sufficient information that allows Us to reasonably verify You are the person about whom We collected personal information or an authorized representative.
- Describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it.
We will respond within the timeframes required by the CCPA/CPRA (generally 45 days, extendable once by an additional 45 days when reasonably necessary with prior notice). Any disclosures We provide will only cover the 12-month period preceding the verifiable request's receipt (or 24 months, if requested and applicable). For data portability requests, We will provide Your personal information in a readily usable format.
GDPR Privacy (EU / UK / EEA Residents)
Legal Basis for Processing Personal Data under GDPR
We may process Personal Data under the following conditions:
- Consent: You have given Your consent for processing Personal Data for one or more specific purposes.
- Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations.
- Legal obligations: Processing Personal Data is necessary for compliance with a legal obligation.
- Vital interests: Processing is necessary to protect Your vital interests or those of another natural person.
- Public interests: Processing is related to a task carried out in the public interest.
- Legitimate interests: Processing is necessary for the purposes of the legitimate interests pursued by the Company.
Your Rights under the GDPR
You have the right to:
- Request access to Your Personal Data — the right to access, update, or delete the information We have on You.
- Request correction of the Personal Data that We hold about You.
- Object to processing of Your Personal Data.
- Request erasure of Your Personal Data.
- Request the transfer of Your Personal Data in a structured, commonly used, machine-readable format.
- Withdraw Your consent at any time.
Exercising Your GDPR Data Protection Rights
You may exercise Your rights of access, rectification, cancellation, and opposition by contacting Us. Please note that We may ask You to verify Your identity before responding to such requests. You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. If You are in the European Economic Area (EEA), please contact Your local data protection authority.
Facebook Fan Page
Data Controller for the Facebook Fan Page
The Company is the Data Controller of Your Personal Data collected while using the Service. As operator of the Facebook Fan Page facebook.com/thedenvermodern, the Company and the operator of the social network Facebook are Joint Controllers.
The Company has entered into agreements with Facebook that define the terms for use of the Facebook Fan Page. These terms are mostly based on the Facebook Terms of Service: facebook.com/terms.php. Visit the Facebook Privacy Policy for more information about how Facebook manages Personal Data, or contact Facebook by mail: Facebook, Inc. ATTN Privacy Operations, 1601 Willow Road, Menlo Park, CA 94025, United States.
Facebook Insights
We use the Facebook Insights function in connection with the operation of the Facebook Fan Page and on the basis of the GDPR, in order to obtain anonymized statistical data about Our users. For this purpose, Facebook places a Cookie on the device of the user visiting Our Facebook Fan Page.
"Do Not Track" Policy as Required by California Online Privacy Protection Act (CalOPPA)
Our Service does not respond to browser Do Not Track (DNT) signals because no industry standard for DNT has been adopted. However, We do honor Global Privacy Control (GPC) signals as described in the "Universal Opt-Out / Global Privacy Control" section above.
Children's Privacy
Our Service is not directed to children under the age of 16, and We do not knowingly collect Personal Data from children under 16 for targeted advertising, Sale, or Sharing. Several state privacy laws (including those in California, Colorado, Connecticut, Maryland, and Tennessee) provide heightened protections for minors, and We comply with those requirements.
If You believe We have collected information from a child under 16, please contact Us at [email protected] and We will delete it.
A parent or guardian who has already given the Company permission to collect and use his or her child's personal information can, at any time:
- Review, correct, or delete the child's personal information;
- Discontinue further collection or use of the child's personal information.
To make such a request, You can write to Us using the contact information provided below.
Your California Privacy Rights (California's Shine the Light Law)
Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with Us can request information once a year about sharing their Personal Data with third parties for the third parties' direct marketing purposes. If You'd like to request more information under the California Shine the Light law, and if You are a California resident, You can contact Us using the contact information provided below.
California Privacy Rights for Minor Users (Cal. Bus. & Prof. Code § 22581)
California Business and Professions Code section 22581 allows California residents under the age of 18 who are registered users of online sites, services
