State Privacy Notice

Last Updated: June 30, 2025

This State Privacy Notice (“Notice”) supplements the information contained in Curri’s Privacy Policy and applies solely to all visitors, users, and others who reside in states that have enacted data privacy laws (“Privacy Law States”). As of the date of this Notice, the Privacy Law States include:

  • California (California Consumer Privacy Act)
  • Colorado (Colorado Privacy Act)
  • Connecticut (Connecticut Data Privacy Act)
  • Delaware (Delaware Personal Data Privacy Act)
  • Iowa (Iowa Consumer Data Protection Act)
  • Maryland (Maryland Online Data Privacy Act, effective 10/1/25)
  • Minnesota (Minnesota Consumer Data Privacy Act, effective 7/31/25)
  • Montana (Montana Consumer Data Privacy Act)
  • Nebraska (Nebraska Data Privacy Act)
  • Nevada (Nevada Privacy of Information Collected on the Internet from Consumers Act)
  • New Hampshire (New Hampshire Data Privacy Act)
  • New Jersey (New Jersey Data Privacy Law)
  • Oregon (Oregon Consumer Privacy Act)
  • Tennessee (Tennessee Information Protection Act, effective 7/1/25)
  • Texas (Texas Data Privacy and Security Act)
  • Utah (Utah Consumer Privacy Act)
  • Virginia (Virginia Consumer Data Protection Act)

We adopt this notice to comply with the laws of these states. Any terms herein that are defined in your state’s privacy law have the same meaning as defined in your state when used in this Notice.

Notice at Collection

We may collect or receive (and may have collected or received during the 12-month period prior to the Last Updated date of this Notice) the following categories of personal information (also referred to in some states as “personal data”), including sensitive personal information. Not all categories will be collected or received for every individual.

  • Identifiers and customer records personal information, such as name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (“IP”) address, email address, account name, Social Security number, driver’s license number, name, signature, telephone number, state identification card number, education, employment, employment history, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
  • Characteristics of protected classifications and demographic information if voluntarily provided, such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, or veteran or military status.
  • Commercial information, including information about products or services considered, purchased, obtained, or other purchasing or consuming histories or tendencies, and financial information.
  • Internet or other electronic network activity information, including information regarding your interactions with us online, including browsing history, search history, and information on your interactions with our websites, applications, or advertisements, and information we obtain from third parties about the use of our applications on third-party platforms or devices.
  • Geolocation data, including approximate location information provided by a mobile device or other device interacting with or detected by our websites or applications.
  • Professional or employment-related information if voluntarily provided, such as current or past job history or performance evaluations.
  • Sensitive Personal Information: Government-issued identifiers (such as Social Security number, driver’s license, and state identification card), account access credentials, and financial information.

We may obtain and combine personal information and sensitive personal information from different sources, as described in the “How We Collect Your Information” section of our Privacy Policy. We collect this information so that we can best serve you, including to fulfill your requests and to share information that we think you may be interested in. As further described in the “How We Use Your Information” section in our Privacy Policy, we generally collect and use the above-listed categories of personal information to provide and manage our Site, applications, and services, and for other business or commercial purposes, such as advertising, marketing, and to improve our products and services.

If you voluntarily provide other sensitive personal information beyond what is listed above, such as racial or ethnic origin, religious or philosophical beliefs, health information, and sex life or sexual orientation information, we do not use such information except, in limited circumstances to:

  • Process health insurance claims.
  • Investigate and process workers’ compensation claims.
  • Review and process religious reasonable accommodations requests.
  • Conduct internal audits and investigate complaints, grievances, and suspected violations of our policies.
  • Respond to law enforcement requests as required by applicable law, court order, or government regulations.
  • Exercise or defend our legal rights and the rights of our employees, customers, contractors, and agents.

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Selling and Sharing of Personal Information

We do not rent, sell, use for targeted advertising, or disclose to third parties for their direct marketing purposes, the personal information we collect. We may disclose your personal information to our third-party service providers for a business purpose as described in the “How We Share Your Information” section in our Privacy Policy. We do not use personal information for targeted advertising.  We do not knowingly sell or share the personal information of consumers under 18 years of age.

Data Retention

We retain each category of personal information that we collect for as long as necessary to fulfill the purposes described in our Privacy Policy, including to satisfy legal or reporting requirements. What this means in practice will vary for different types of information, but the criteria assessed in the data retention analysis consider ongoing business or legal needs for the information, for example in relation to tax, health and safety, and potential or actual disputes or investigations.

Your State Privacy Rights

If you are a resident of a Privacy Law State, you can make certain requests regarding your personal information. Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies. If we are unable to comply with your request in whole or in part, we will notify you with reasons for the denial.

Except where otherwise indicated, the following rights exist in all Privacy Law States:

  • Right to Know: You have the right to request that we disclose to you the categories of personal information we have collected about you over the past 12 months, as well as the sources of such personal information, the purposes, and the categories of third parties with whom such personal information is shared.
  • Right to Access: You have the right to request, up to two times each year, access to categories and specific pieces of personal information about you that we collect, use, disclose, sell, and share. This is also called a “data portability request.”
  • Right to Delete: You have the right to request that we delete personal information that we collect from you, subject to applicable legal exceptions.
  • Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you, subject to applicable legal exceptions. Note that this right is not applicable to residents of Iowa and Utah.
  • Right to Opt-Out of Sale or Sharing of Personal Information and Targeted Advertising: You have the right to opt out of the sale or sharing of your personal information to or with third parties, as well as the right to opt out of targeted advertising and certain types of profiling.
  • Right Not to Receive Discriminatory Treatment. You have the right not to receive discriminatory treatment for the exercise of your privacy rights. If you choose to exercise any of these rights, you will not receive different prices or quality of services unless permitted by applicable law, including if those differences are reasonably related to your information. For example, if you exercise your right to opt out of sale or sharing of your personal information, the ads you view may not be tailored to your interests.

Exercising Your Privacy Rights

To exercise your rights to know, access, delete, or correct your personal information, please submit a request by contacting us using one of the methods provided below in the Contact Information section. Please note the following:

  • After receiving your request, we will confirm receipt of your request within ten (10) business days. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. We endeavor to substantively respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.
  • You may only submit a request to know twice within a 12-month period.
  • Only you, or someone legally authorized to act on your behalf, may make a request related to your personal information. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a request to review and comply with the request.
  • You may use an authorized agent to submit a request to know, access, delete, correct, or opt-out on your behalf. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with applicable law. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity.
  • We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We will delete or de-identify personal information not subject to a legal exception from our records and will direct our service providers to take similar action. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

How to Submit An Appeal

To appeal our decision regarding a request to these rights, you may contact us using one of the methods provided below in the Contact Information section. We will respond to your appeal request within 45 days of receipt.

Contact Information

If you have any questions or comments about this notice, the ways in which Curri collects and uses your information described here and in Curri’s Privacy Policy, your choices and rights regarding such use, or wish to exercise your state privacy rights, please do not hesitate to contact us at:

Phone: 877-772-8774

Email: legal@curri.com

Postal Address:

Curri, Inc.

PO Box 788

Ventura, California 93002

Attn: Legal Department

@2025 Curri Inc.