# Privacy Policy ## Policy Summary The summary below states the key facts about this Privacy Policy and how to reach us. Business : {business_legal_name} Contact Email : {business_contact_email} Postal Address : {business_postal_address} Effective Date : {policy_effective_date} Last Updated : {policy_last_updated} Privacy Request Link : {privacy_request_url} ## Privacy Policy ### Who We Are This Privacy Policy explains how {business_legal_name} collects, uses, and shares your [[Personal Data]] — information that is linked or reasonably linkable to an identified or identifiable individual. If you have questions about this policy or your privacy rights, contact us at {business_contact_email} or {business_postal_address}. ### Effective Date This Privacy Policy is effective as of {policy_effective_date}. ### Information We Collect We collect the following categories of [[Personal Data]]: {personal_data_categories}. We collect this information from the following sources: {data_sources}. ### Sensitive Information Some of what we collect is [[Sensitive Data]] — the more protected categories of personal data that we process only with your opt-in consent. We identify those categories here separately: {sensitive_data_categories}. ### Why We Collect It We process [[Personal Data]] for the following purposes: {processing_purposes}. ### How We Share It We may share [[Personal Data]] with the following categories of third parties: {third_party_categories}. ### Your Privacy Rights If you are a [[Consumer]] — an individual who is a resident of a state acting in an individual or household context — in a state with a comprehensive privacy law, you have the right to: confirm whether we process your [[Personal Data]] and access it; correct inaccuracies; delete it; obtain a portable copy; and opt out of [[Targeted Advertising]], the [[Sale]] of your [[Personal Data]], and [[Profiling]] in furtherance of decisions that produce legal or similarly significant effects. You may also opt out of our collection of [[Sensitive Data]] and of the use of voice- or facial-recognition features. ### How to Exercise Your Rights To exercise any of these rights, submit a request at {privacy_request_url}. We will not deny you goods or services, or otherwise discriminate against you, for exercising them. ### Our Response We will respond to your request without undue delay and within {rights_response_days} days of receipt. When reasonably necessary we may extend this period once by 15 additional days, and we will tell you of the extension and the reason within the initial period. ### Appeals If we decline to act on your request, you may appeal at {appeal_request_url}. We will respond in writing, with the reasons for our decision, within {appeal_response_days} days. ### Sale of Data and Targeted Advertising Where we [[Sell]] your [[Personal Data]] — that is, exchange it for monetary or other valuable consideration — or process it for [[Targeted Advertising]] — advertising selected based on personal data obtained from your activity across nonaffiliated sites or applications — you may opt out of those activities at any time at {privacy_request_url}. ### Notice of Sale of Sensitive Data NOTICE: We may sell your sensitive personal data. ### Profiling We use [[Profiling]] — automated processing to evaluate, analyze, or predict an individual's characteristics — in furtherance of decisions that produce legal or similarly significant effects concerning you. You may opt out of this profiling at {privacy_request_url}. ### Universal Opt-Out Signals We recognize and honor a [[Universal Opt-Out Signal]] — a user-selected browser or device control, such as the Global Privacy Control (GPC) — as a valid request to opt out of [[Targeted Advertising]] and the [[Sale]] of [[Personal Data]] from the browser or device that sends it. ### Sensitive Data We obtain your opt-in consent before collecting or processing your [[Sensitive Data]] ({sensitive_data_categories}). You may withdraw that consent at any time at {privacy_request_url}. ### Children Under 13 We do not knowingly collect [[Personal Data]] from a child under 13 without verifiable parental consent, and we handle any such data in accordance with the Children's Online Privacy Protection Act (COPPA). ### Biometric Data Retention We maintain this written, publicly available policy establishing our retention schedule and guidelines for permanently destroying [[Biometric Identifier]]s — retina or iris scans, fingerprints, voiceprints, or scans of hand or face geometry. We destroy a [[Biometric Identifier]] when the initial purpose for collecting it has been satisfied or within three years of your last interaction with us, whichever occurs first. ### Biometric Consent Before we collect a [[Biometric Identifier]], we inform you in writing that we are collecting it, the specific purpose, and the length of time we will store and use it, and we obtain your written release. ### Consumer Health Data We collect the categories of [[Consumer Health Data]] listed in Information We Collect, use that data for the purposes listed in Why We Collect It, and share it with the third parties and affiliates listed in How We Share It. You may exercise your rights over this data at {privacy_request_url}. ### Consent for Health Data We do not collect [[Consumer Health Data]] except with your consent for a specified purpose, or to the extent necessary to provide a product or service you have requested from us. ### Website Notice Through our website we collect the categories of covered information described above and may share them with the third-party categories described above. You may review and request changes to your information, where that process is available, at {privacy_request_url}. We notify you of material changes as described in Changes to This Policy. Third parties may collect covered information about your online activities over time and across different websites when you use our website. ### Minors Where we direct services to, or have actual knowledge of, users who are minors, we provide the additional disclosures required by applicable state law, including our minors' design and safety practices, the privacy protections we apply to minors, and the parental tools we make available. ### Data Broker Opt-Out As a [[Data Broker]] — a business that knowingly sells or licenses to third parties the personal data of consumers with whom it has no direct relationship — we let you opt out of our collection, sale, or licensing of your [[Personal Data]]. You or your authorized agent may submit an opt-out request at {privacy_request_url}. ### Keeping This Policy Current We review this Privacy Policy and refresh its disclosures at least once every 12 months. It was last updated on {policy_last_updated}. ### Changes to This Policy When we make a material change to this Privacy Policy, we will revise it, update the Effective Date above, and take reasonable steps to notify you of the change. ## How to Contact Us If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact {business_legal_name} at {business_contact_email} or {business_postal_address}. --- For repeat use, install the skill: `npx skills add open-agreements/open-agreements` (lawyer-reviewed agreement templates + 50-state practice guides). _Machine-readable formats — [HTML](https://openagreements.org/templates/openagreements-privacy-policy) · [JSON](https://openagreements.org/templates/openagreements-privacy-policy/template.json) · [Word (.docx)](https://openagreements.org/templates/openagreements-privacy-policy/template.docx) · [Agent Skill](https://openagreements.org/skills/open-agreements/SKILL.md) · Fill via MCP: `https://openagreements.org/api/mcp`_