COLORADO RESIDENT PRIVACY NOTICE

COLORADO RESIDENT PRIVACY NOTICE

Last Revised Date: May 10, 2024

This Colorado Resident Privacy Notice (“Colorado Notice”) provided by Thirty Madison, Inc., d/b/a Cove, Keeps, and Facet, and its subsidiaries and affiliates("Company" or "We") supplements the information contained in the Thirty Madison Online Privacy Policy (“Privacy Policy” or “Policy”) and the State Privacy Law Addendum (“Addendum”) and applies solely to individual residents of the State of Colorado ("consumers" or "you"). If you are a Colorado resident, the Colorado Privacy Act, C.R.S. §§ 6-1-1301 et seq. and its implementing regulations 4 CCR 904-3, as may be amended from time to time (collectively, “CPA”), provide you with certain rights with respect to your Personal Data, as that term is defined under and subject to the CPA. This Colorado Notice describes your CPA rights with respect to your Personal Data and explains how to exercise those rights, subject to CPA exceptions. Any terms defined in the CPA have the same meaning when used in this Colorado Policy.

The Right to Confirm/Access/Data Portability You have the right to confirm whether we are using or disclosing your Personal Data and to access the specific pieces of Personal Data we have collected about you, upon verification of your identity. You also have the right to obtain such data in a portable format but no more than twice per calendar year.

The Right to Correct You have the right to request that we correct the inaccurate or incomplete Personal Data that we collected and maintain about you. We may ask you for documentation to determine if the requested correction is accurate. We may have a reason under the CPA or other laws to deny your request, either in whole or in part. If so, we will explain that reason to you in our response.

The Right to Request Deletion You have the right to request that we delete the Personal Data that we collected from you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Data from our records, unless an exception applies. We may also have a reason under the CPA or other laws to deny your deletion request, either in whole or in part. If so, we will explain that reason to you in our response.