Virginia Privacy Disclosure

1. Overview of the law

The Virginia Consumer Data Protection Act took effect on January 1, 2023. It applies to businesses that process personal data of at least 100,000 Virginia residents in a year, or 25,000 residents when more than half of revenue comes from selling personal data. The law is enforced by the Virginia Attorney General. SIE meets the 100,000 resident threshold and follows the VCDPA in full.

2. Your rights

• Right to access. Confirm whether we process your personal data and get a copy.
• Right to correct. Fix inaccurate personal data.
• Right to delete. Have personal data we hold about you erased.
• Right to data portability. Receive your data in a usable, machine-readable format.
• Right to opt out. Stop targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects.
• Right to appeal. If we decline a request, you can appeal it inside the platform within sixty days.

3. How SIE complies

We obtain opt-in consent before processing sensitive data, including data revealing race, religion, health, sexual orientation, citizenship status, genetic or biometric data for identification, or data of a known child. We do not engage in profiling that has legal effects on individuals. We document a data protection assessment for any processing that presents heightened risk under VCDPA § 59.1-580.

4. Authorized agents

The VCDPA does not require us to honor authorized agents for most requests. As a courtesy, SIE accepts properly documented authorized-agent submissions, but we will verify the request with you directly before acting on it.

5. How to submit a request

Or email [email protected] with the subject line "Virginia VCDPA Request".We will respond within forty-five days, with one possible forty-five-day extension where the request is complex.

6. Effective date and scope

The VCDPA took effect on January 1, 2023, and applies to controllers processing personal data of at least 100,000 Virginia residents annually. The law covers Virginia residents acting in an individual or household context and excludes employee and B2B contact data.