Connecticut Data Privacy Act Privacy Notice

CONNECTICUT DATA PRIVACY ACT PRIVACY NOTICE

Controller: [COMPANY LEGAL NAME]

Effective date: [MONTH DAY, YEAR]

Most recent update: [MONTH YEAR]

1. Scope

This notice describes how [COMPANY LEGAL NAME] handles personal data of Connecticut residents acting in an individual or household context. It does not address data handled solely in a commercial or employment context. We provide it under Conn. Gen. Stat. §§ 42-515 to 42-525, as applicable. Our business processes Connecticut consumers' data in connection with [DESCRIBE SERVICES].

2. Personal data and purposes

We process the categories below for the stated purposes. Include each category actually processed, including any sensitive data, and delete unused rows.

We process sensitive data only as permitted by Conn. Gen. Stat. § 42-520(a)(1)(D) and (H), including required consent. For a known child, we process sensitive data in accordance with COPPA as that section requires.

3. Sale, targeted advertising, and profiling

Sale of personal data: [WE DO / DO NOT] sell personal data. If we sell it, the categories sold are [CATEGORIES] and the categories of third parties to which we sell it are [THIRD-PARTY CATEGORIES].

Targeted advertising: [WE DO / DO NOT] process personal data for targeted advertising. If we do, the categories involved are [CATEGORIES] and the advertising partners are [CATEGORIES OF PARTNERS].

Profiling for decisions with legal or similarly significant effects: [WE DO / DO NOT] engage in such profiling. If we do, we use [DATA CATEGORIES] to make [DESCRIBE DECISIONS].

4. Training large language models

[WE COLLECT, USE, OR SELL / WE DO NOT COLLECT, USE, OR SELL] personal data for the purpose of training large language models. If yes, describe the data and use: [DESCRIPTION]. This statement addresses the disclosure required by Conn. Gen. Stat. § 42-520(b)(1)(H).

5. Connecticut privacy rights

Subject to the conditions and exceptions in Conn. Gen. Stat. § 42-518, you may:

• Confirm whether we process your personal data and access it, including covered inferences and profiling information.
• Correct inaccuracies in your personal data.
• Delete personal data provided by or obtained about you.
• Obtain a portable copy of personal data processed by automated means, where technically feasible.
• Opt out of targeted advertising, sale of personal data, and profiling in furtherance of automated decisions that produce legal or similarly significant effects.
• Where feasible and the statutory conditions apply, question certain profiling decisions, learn the reason, review data used, and correct inaccurate data used for a housing decision and have it reevaluated.
• Request a list of third parties to which we sold your personal data or, if we do not maintain that list, a list of all third parties to which we sold personal data, subject to the trade-secret limitation.

Some sensitive identifiers and account credentials cannot be disclosed in response to an access request under § 42-518(e); we will instead inform you with sufficient particularity that we collected them.

6. How to make a request or opt out

Submit a request by [WEB FORM URL] or [ACTIVE EMAIL ADDRESS]. You may also reach us at [OTHER CHANNEL, IF OFFERED]. Describe the right you wish to exercise. We may ask for information reasonably needed to authenticate requests for access, correction, deletion, portability, or the applicable profiling rights. We do not require you to create a new account to make a request.

For targeted advertising or sale opt-outs, use [CLEAR OPT-OUT WEBPAGE URL]. We also process qualifying opt-out preference signals under § 42-520(c)(1)(A)(ii). An authorized agent may submit an opt-out request for you as permitted by § 42-518(b). A parent, guardian, or conservator may exercise rights on another person's behalf where that subsection permits.

7. Response and appeal

We respond without undue delay and within 45 days after receiving a request. If reasonably necessary, we may extend that period by another 45 days and tell you the reason within the initial period. We provide one response free of charge per consumer in a 12-month period. For manifestly unfounded, excessive, or repetitive requests, we may charge a reasonable administrative fee or decline to act as § 42-518(c)(3) allows.

If we decline to act, we will explain why and how to appeal. Submit an appeal through [APPEAL WEB FORM OR EMAIL]. We will provide a written appeal decision within 60 days. If we deny the appeal, we will explain how to contact the Connecticut Attorney General to submit a complaint.

8. Minors' data

If we actually know, or wilfully disregard, that a consumer is 13 to 17 years old, we do not process that consumer's personal data for targeted advertising or sell it without the consent required by Conn. Gen. Stat. § 42-520(a)(1)(I). If we offer an online service, product, or feature to consumers we actually know, or wilfully disregard, are minors, the additional restrictions in § 42-529a apply, including its prohibition on targeted advertising and sale of minors' personal data. Our minor-facing services and practices are [DESCRIPTION OR "NOT APPLICABLE"].

9. Contact and updates

Privacy contact: [ACTIVE EMAIL OR OTHER ONLINE MECHANISM]

Mailing address: [ADDRESS, IF OFFERED]

We updated this notice most recently in [MONTH YEAR]. We will make any required notice and provide a reasonable opportunity to withdraw consent if we make a retroactive material change covered by Conn. Gen. Stat. § 42-520(b)(3).