Multi-State Privacy Addendum
RACO Manufacturing & Engineering Co., Inc.
Last Updated: June 2026
Overview
This Multi-State Privacy Addendum supplements the Master Privacy Policy and applies to residents of states with comprehensive consumer privacy laws. This Addendum describes rights and procedures specific to your state of residence.
Applicability: If you are a resident of Colorado, Connecticut, Utah, Virginia, or another state with a comprehensive privacy law listed below, the rights and procedures in this Addendum apply to you in addition to and in some cases in place of the provisions in the Master Privacy Policy.
Hierarchy: In the event of conflict between this Addendum and the Master Privacy Policy, this Addendum controls for your state's rights.
1. Colorado Privacy Act (CPA)
Applicability
This section applies to residents of Colorado.
What is Personal Information Under CPA?
Personal information means any information that is linkable to an identified or reasonably identifiable individual, but does not include publicly available information that is not linked to personal information about a specific individual.
Your Rights Under CPA
You have the following rights regarding your personal information:
Right to Access (Know)
You have the right to request and obtain confirmation of what personal information RACO holds about you, including:
- Categories of personal information collected
- Sources of collection
- Purposes for collection
- Categories of third parties with whom the information is shared
How to Request: Submit a verifiable consumer request to privacy@racoman.com
Response Timeline: RACO will respond within 45 calendar days
Verification: RACO may require sufficient information to verify your identity and authority to make the request
Right to Delete
You have the right to request deletion of personal information that RACO has collected from you.
Exceptions: RACO is not required to delete information if:
- The information is necessary to complete a transaction you requested
- RACO is legally required to retain the information
- The information is necessary for fraud detection or security
- The information is necessary for internal uses reasonably aligned with your expectations
- Deletion would impair RACO's ability to comply with legal obligations or exercise legal rights
How to Request: Submit a verifiable consumer request to privacy@racoman.com
Response Timeline: RACO will respond within 45 days
Right to Correction
You have the right to request correction of inaccurate personal information.
How to Request: Submit a request describing the inaccuracy to privacy@racoman.com
Response Timeline: RACO will respond within 45 days and correct the information or explain why it cannot be corrected
Right to Opt-Out of Targeted Advertising
You have the right to direct RACO not to process your personal information for purposes of targeted advertising.
What is Targeted Advertising: Advertising based on personal information about your browsing, purchasing, or other online behavior that is collected across nonaffiliated websites and applications.
How to Opt-Out:
- Click "Do Not Process for Targeted Advertising" on our website, or
- Email privacy@racoman.com with the subject line "Opt-Out of Targeted Advertising"
Effect: RACO will not process your personal information for targeted advertising purposes. You may still receive contextual advertising (based on content you're currently viewing) and other advertising.
Duration: Your opt-out will remain in effect until you withdraw it in writing
Right to Opt-Out of Sale or Sharing
You have the right to direct RACO not to sell or share your personal information.
What Constitutes "Sale": Transferring personal information to third parties for monetary or other valuable consideration
What Constitutes "Sharing": Allowing third parties to use personal information for their own purposes, such as cross-context behavioral advertising
RACO's Current Practice: RACO does not sell personal information for monetary consideration. RACO may share certain personal information with advertising platforms for targeted advertising purposes. By opting out, you direct us not to engage in such sharing.
How to Opt-Out:
- Click "Do Not Sell or Share My Personal Information" on our website, or
- Email privacy@racoman.com with the subject line "Opt-Out of Sale/Sharing"
Effect: RACO will not share your personal information for cross-context behavioral advertising
Right to Obtain a Copy in Portable Format
You have the right to receive your personal information in a portable format (structured, commonly used, machine-readable format).
How to Request: Submit a request to privacy@racoman.com and specify that you want the information in a portable format
Response Timeline: RACO will provide the information within 45 days
Verification and Response Procedures
Verification Requirements: To verify your identity, RACO may require:
- Your name and email address
- Additional identifying information (last 4 of SSN, phone number, etc.)
- A signed statement under penalty of perjury
Response:
- RACO will acknowledge your request within 10 business days
- RACO will respond substantively within 45 days
- If RACO cannot fully comply, it will explain the limitations
No Discrimination: RACO will not discriminate against you for exercising your privacy rights, including by:
- Denying goods or services
- Charging different prices or rates
- Providing different quality of service
- Threatening to charge different prices or rates
Exception: RACO may offer financial incentives for collection of personal information, provided the incentive is reasonably related to the value of the data
2. Connecticut Data Privacy Act (CTDPA)
Applicability
This section applies to residents of Connecticut.
What is Personal Data Under CTDPA?
Personal data means any information that is linked or linkable to an identified or identifiable natural person. Does not include deidentified or aggregate data.
Your Rights Under CTDPA
You have the following rights:
Right to Access
You have the right to request confirmation of what personal data RACO collects and maintains about you, and obtain a copy of that personal data in a portable and readily useable format.
How to Request: Submit a verifiable consumer request to privacy@racoman.com
Response Timeline: RACO will respond within 45 days
Right to Correct/Rectification
You have the right to request correction of inaccurate personal data.
How to Request: Submit a request to privacy@racoman.com describing the inaccuracy
Response Timeline: RACO will respond within 45 days
Right to Deletion
You have the right to request deletion of personal data collected from you.
Exceptions: RACO may retain information if:
- Necessary to complete a transaction
- Legally required to retain the information
- Necessary for fraud detection, security, or other lawful purposes
- Information is used for internal analytics
How to Request: Submit a request to privacy@racoman.com
Response Timeline: RACO will respond within 45 days
Right to Opt-Out of Sale of Personal Data
You have the right to direct RACO not to sell your personal data.
RACO's Practice: RACO does not currently sell personal data in exchange for monetary value.
How to Opt-Out: Click "Do Not Sell My Personal Data" on our website
Right to Opt-Out of Processing for Targeted Advertising
You have the right to direct RACO not to process your personal data for targeted advertising purposes.
How to Opt-Out:
- Click "Opt-Out of Targeted Advertising" on our website, or
- Email privacy@racoman.com with the subject line "Opt-Out of Targeted Advertising"
Effect: RACO will not process your personal data for purposes of targeted advertising
Special Protections for Sensitive Data
RACO limits processing of sensitive data (social security numbers, precise geolocation, financial account information, racial/ethnic origin, religious beliefs) to uses that are strictly necessary to provide services you requested or as otherwise permitted by law.
You may request that RACO limit its use of sensitive data by emailing privacy@racoman.com with the subject line "Limit Sensitive Data Processing."
Verification Requirements
RACO will verify your identity by:
- Requesting your name and email address
- Requesting additional information to confirm identity
- In some cases, requiring a signed declaration under penalty of perjury
Non-Discrimination
RACO will not discriminate against you for exercising your CTDPA rights.
3. Utah Consumer Privacy Act (UCPA)
Applicability
This section applies to residents of Utah.
What is Personal Data Under UCPA?
Personal data means information about an individual that can be linked to a specific person. Does not include deidentified data or aggregated consumer information.
Your Rights Under UCPA
Right to Know
You have the right to request what personal data RACO collects about you, how it is used, and to whom it is disclosed.
How to Request: Submit a verifiable consumer request to privacy@racoman.com
Response Timeline: RACO will respond within 45 days
Right to Delete
You have the right to request deletion of personal data collected from you, subject to exceptions for legally required retention or necessary business purposes.
How to Request: Submit a request to privacy@racoman.com
Response Timeline: RACO will respond within 45 days
Right to Obtain a Copy
You have the right to obtain a copy of your personal data in a portable format.
How to Request: Submit a request to privacy@racoman.com
Response Timeline: RACO will provide the copy within 45 days
Right to Opt-Out of Targeted Advertising
You have the right to direct RACO not to process your personal data for targeted advertising purposes.
How to Opt-Out:
- Click "Opt-Out of Targeted Advertising" on our website, or
- Email privacy@racoman.com with the subject line "Opt-Out of Targeted Advertising"
Right to Opt-Out of Sale of Personal Data
You have the right to direct RACO not to sell your personal data.
RACO's Practice: RACO does not currently sell personal data for monetary value.
How to Opt-Out: Click "Do Not Sell My Personal Data" on our website
Non-Discrimination
RACO will not discriminate against you for exercising your UCPA rights.
Verification
RACO will verify your identity before processing your request using:
- Name and email address
- Additional identifying information as reasonably necessary
- Signed declaration under penalty of perjury if required
4. Virginia Consumer Data Protection Act (VCDPA)
Applicability
This section applies to residents of Virginia.
What is Personal Data Under VCDPA?
Personal data means any information that is linked or reasonably linkable to an identified or identifiable natural person. Does not include deidentified data or publicly available information.
Your Rights Under VCDPA
Right to Know/Access
You have the right to request confirmation of whether RACO collects personal data about you and request access to that data.
How to Request: Submit a verifiable consumer request to privacy@racoman.com
Response Timeline: RACO will respond within 45 days
Right to Delete
You have the right to request deletion of personal data about you that RACO has collected.
Exceptions: RACO may retain data if:
- Necessary to complete a transaction
- Legally required to retain
- Necessary to detect, prevent, or address fraud, security, or legal claims
- Used for internal analytics that is deidentified
How to Request: Submit a request to privacy@racoman.com
Response Timeline: RACO will respond within 45 days
Right to Correct/Rectification
You have the right to request correction of inaccurate personal data.
How to Request: Submit a request to privacy@racoman.com describing the inaccuracy
Response Timeline: RACO will respond within 45 days
Right to Data Portability
You have the right to obtain your personal data in a portable format.
How to Request: Submit a request to privacy@racoman.com
Response Timeline: RACO will provide the data within 45 days
Right to Opt-Out of Targeted Advertising
You have the right to direct RACO not to process your personal data for targeted advertising purposes.
How to Opt-Out:
- Click "Opt-Out of Targeted Advertising" on our website, or
- Email privacy@racoman.com with the subject line "Opt-Out of Targeted Advertising"
Effect: RACO will not use your personal data to create consumer profiles for targeted advertising
Right to Opt-Out of Sale
You have the right to direct RACO not to sell your personal data.
RACO's Practice: RACO does not currently sell personal data for monetary value.
How to Opt-Out: Click "Do Not Sell My Personal Data" on our website
Right to Opt-Out of Profiling
You have the right to direct RACO not to process your personal data for profiling purposes.
What is Profiling: Using your personal data to create a consumer profile based on your characteristics, behavior, or interests, for purposes of making decisions that affect you.
How to Opt-Out: Email privacy@racoman.com with the subject line "Opt-Out of Profiling"
Effect: RACO will not create profiles about you based on your personal data
Verification Procedures
RACO will verify your identity by:
- Requesting your name and email address
- Requesting additional identifying information
- In some cases, requiring a signed declaration
Non-Discrimination
RACO will not discriminate against you for exercising your VCDPA rights.
5. Additional States (Emerging Laws)
Arizona Privacy Act (AZIPA)
Status: Effective January 1, 2024 (currently under legal challenge)
If you are a resident of Arizona, you have rights to access, delete, correct, and opt-out of sale/profiling under the AZIPA. These rights are similar to those listed above for Colorado, Connecticut, Utah, and Virginia. Specific procedures for Arizona will be posted on our website as the law develops.
Montana Consumer Data Privacy Act (MTCDPA)
Status: Effective October 1, 2024 (currently under legal challenge)
If you are a resident of Montana, you have rights to access, delete, correct, and opt-out of targeted advertising under the MTCDPA. Specific procedures for Montana will be posted on our website as the law develops.
New Hampshire Privacy Act (NHMPA)
Status: Proposed; not yet enacted
If this law is enacted, we will provide a notice and procedures for New Hampshire residents.
Oregon Consumer Privacy Act (OCPA)
Status: Effective January 1, 2024
If you are a resident of Oregon, you have rights to access, delete, correct, and opt-out of sale/targeted advertising under the OCPA. Specific procedures will be posted as the law develops.
Texas Data Privacy and Security Act (TDPSA)
Status: Effective January 1, 2024
If you are a resident of Texas, you have rights to access, delete, correct, and opt-out of sale/targeted advertising under the TDPSA. Specific procedures will be posted as the law develops.
6. Unified Procedures for All States
Submitting Requests
You may submit privacy requests through any of the following methods:
Email: privacy@racoman.com
Mailing Address: RACO Manufacturing & Engineering Co., Inc. Legal Team 727 Allston Way, Suite B Berkeley, CA 94710
Phone: 1-510-658-6713 (Monday–Friday, 9 AM–5 PM Pacific Time)
Verification Process
Tier 1 Verification (Standard):
- Full name
- Email address used with the Service
- Current mailing address
Tier 2 Verification (Enhanced): If RACO cannot verify your identity using Tier 1 information, we may request:
- Last 4 digits of Social Security Number
- Phone number on file
- Account number
Tier 3 Verification (Maximum): For highly sensitive requests, RACO may require:
- Government-issued photo ID (copy)
- Signed declaration under penalty of perjury
RACO will inform you which tier is required before processing your request.
Timeline for Responses
- Acknowledgment: Within 10 business days, RACO will acknowledge receipt and confirm whether verification is complete
- Response: Within 45 calendar days of verification, RACO will respond substantively
- Extension: If your request is complex, RACO may extend the response period by up to 45 additional days, with notice
Authorized Agents
You may designate an authorized agent to submit requests on your behalf. The agent must provide:
- Proof of authorization (power of attorney, signed authorization letter)
- Their own identity verification
- A completed verification form
Appeal Process
If RACO denies a request (wholly or partially), we will:
- Explain the reason for denial
- Provide a link to submit an appeal
- Consider your appeal within 45 days
You may appeal a denial by emailing privacy@racoman.com with the subject line "Privacy Request Appeal."
No Discrimination or Retaliation
RACO will not discriminate against you for exercising your rights under state privacy laws. This includes:
- Not denying goods or services
- Not charging different prices or rates
- Not providing different quality of service
- Not retaliating against you in any way
Exception: RACO may offer financial incentives for data collection, provided the incentive is reasonably related to the value of the data and clearly disclosed.
7. Sensitive Information / Sensitive Data Protection
Several states require special protections for sensitive information. RACO limits processing of sensitive information to the following purposes:
Sensitive Information Categories:
- Social Security Numbers
- Financial account information
- Precise geolocation
- Racial or ethnic origin
- Religious beliefs or practices
- Union membership
- Genetic or biometric data
- Health information
- Sex life or sexual orientation
Permitted Uses:
- Providing services you requested
- Ensuring security and preventing fraud
- Complying with legal obligations
- Using information you have explicitly consented to process
Your Right to Limit: You may request that RACO limit its processing of sensitive information by emailing privacy@racoman.com with the subject line "Limit Sensitive Information Processing."
8. Automated Decision-Making
Under some state laws, you may have the right to request human review if RACO uses automated decision-making technology that produces legal or similarly significant effects concerning you.
Current RACO Practices: RACO uses automated decision-making for:
- Email filtering and spam detection
- Fraud detection and risk assessment
- Marketing audience segmentation
RACO does not use automated decision-making for:
- Eligibility determinations for services
- Credit decisions
- Employment decisions
- Pricing or rate-setting for individual customers
How to Request Human Review: If you believe an automated decision has significantly affected you, email privacy@racoman.com with the subject line "Request Human Review of Automated Decision."
9. Conflicting Requirements
If you reside in multiple states: You will have rights under each state's law. RACO will honor the most protective standard.
If a state law conflicts with this Addendum: The state law controls.
If a state law conflicts with RACO's product-specific terms: RACO will comply with the state law while maintaining contractual obligations.
10. Changes to State Laws
As state privacy laws evolve and new laws are enacted, RACO will update this Addendum. We will post notices on our website and in your account (where applicable) regarding changes.
11. Contact Information
Privacy Questions and Requests
Email: privacy@racoman.com
Phone: 1-510-658-6713
Mailing Address: RACO Manufacturing & Engineering Co., Inc. Privacy Team 727 Allston Way, Suite B Berkeley, CA 94710
Hours: Monday–Friday, 9 AM–5 PM Pacific Time
12. Relationship to Master Privacy Policy
This Multi-State Privacy Addendum supplements and, in some cases, supersedes the provisions of the Master Privacy Policy. Specifically:
- For matters addressed in this Addendum, follow the procedures and rights listed here for your state
- For matters not addressed in this Addendum, refer to the Master Privacy Policy
- In case of conflict, this Addendum controls for state-specific rights
State-Specific Summary Chart
| Right | Colorado | Connecticut | Utah | Virginia |
|---|---|---|---|---|
| Right to Access | ✓ | ✓ | ✓ | ✓ |
| Right to Delete | ✓ | ✓ | ✓ | ✓ |
| Right to Correct | ✓ | ✓ | ✓ | ✓ |
| Right to Portability | ✓ | ✓ | ✓ | ✓ |
| Opt-Out Targeted Ads | ✓ | ✓ | ✓ | ✓ |
| Opt-Out Sale | ✓ | ✓ | ✓ | ✓ |
| Opt-Out Profiling | — | — | — | ✓ |
| Sensitive Data Limits | ✓ | ✓ | — | ✓ |
| Non-Discrimination | ✓ | ✓ | ✓ | ✓ |
| Human Review (Auto Decisions) | ✓ | ✓ | ✓ | ✓ |
Effective Date: June 2026
Last Updated: June 2026
Quick Reference Links
End of Multi-State Privacy Addendum