U.S. Privacy Rights
Your Privacy Rights & Do Not Sell My Information
1 Overview
This notice describes the privacy rights available to U.S. residents under applicable state consumer privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Texas Data Privacy and Security Act (TDPSA), the Florida Digital Bill of Rights (FDBR), the Oregon Consumer Privacy Act (OCPA), the Montana Consumer Data Privacy Act (MTCDPA), and substantially similar laws enacted in Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Tennessee, and other states.
This notice supplements our Privacy Policy. For residents of a particular state, where this notice conflicts with the Privacy Policy, this notice controls. Residents of states without a comprehensive privacy law still have rights under federal law and our general privacy practices described below.
2 Rights Available to U.S. Residents
The rights below are available depending on your state. Not every right applies in every state — see Section 3 for state-specific details.
Right to Know / Access
Request disclosure of the categories or specific pieces of personal information we have collected about you, and how we use and share it.
Right to Delete
Request deletion of personal information we hold about you, subject to certain legal exceptions (e.g., completing a transaction, legal obligations).
Right to Correct
Request correction of inaccurate personal information we maintain about you.
Right to Portability
Receive a copy of your personal information in a portable, readily usable format where technically feasible.
Right to Opt Out
Opt out of the sale or sharing of your personal information and targeted advertising, and in some states, profiling for consequential decisions.
Limit Sensitive Data (CA)
Limit our use of sensitive personal information to purposes necessary to provide our services (California only).
Right to Appeal
Appeal our decision if we decline your privacy request (Virginia, Colorado, Connecticut, Texas, Montana, and others).
Non-Discrimination
We will not deny services, charge different prices, or treat you differently for exercising any privacy right.
3 State-Specific Rights & Timelines
Select your state for the rights and response timelines that apply to you.
California — CCPA / CPRA
Effective: Jan 1, 2020 (CCPA); Jan 1, 2023 (CPRA)
Rights: Know, access, delete, correct, portability, opt out of sale/sharing, limit use of sensitive personal information, non-discrimination, appeal.
Response timeline: Confirm receipt within 10 business days; respond within 45 calendar days (45-day extension available).
Opt out of sale/sharing: Use the form in Section 5 or email [email protected]. We do not sell or share the personal information of consumers we know to be under 16.
Shine the Light (Cal. Civ. Code §1798.83): California residents may request a list of third parties to whom we disclosed personal information for direct marketing in the prior calendar year. Email [email protected], subject: "Shine the Light Request."
Global Privacy Control: We treat GPC browser signals as a valid opt-out of sale and sharing for California residents.
Virginia — VCDPA (Va. Code Ann. §59.1-575 et seq.)
Effective: January 1, 2023
Rights: Access, delete, correct, portability, opt out of sale, targeted advertising, and profiling for consequential decisions; appeal.
Response timeline: 45 days (45-day extension available). Appeals responded to within 60 days.
To submit: Form in Section 5 or [email protected].
Colorado — CPA (C.R.S. §6-1-1301 et seq.)
Effective: July 1, 2023
Rights: Access, delete, correct, portability, opt out of sale, targeted advertising, and profiling for decisions with legal or similarly significant effects; appeal.
Response timeline: 45 days (45-day extension available). Appeals within 45 days.
Universal Opt-Out: We honor the Global Privacy Control (GPC) as a valid opt-out for Colorado residents.
To submit: Form in Section 5 or [email protected].
Connecticut — CTDPA (Conn. Gen. Stat. §42-515 et seq.)
Effective: July 1, 2023
Rights: Access, delete, correct, portability, opt out of sale, targeted advertising, and profiling for consequential decisions; appeal.
Response timeline: 45 days (45-day extension available). Appeals within 60 days.
Universal Opt-Out: We honor GPC signals for Connecticut residents.
To submit: Form in Section 5 or [email protected].
Texas — TDPSA (Tex. Bus. & Com. Code §541 et seq.)
Effective: July 1, 2024
Rights: Access, delete, correct, portability, opt out of sale, targeted advertising, and profiling for decisions with legal or similarly significant effects; appeal.
Response timeline: 45 days (45-day extension available). Appeals within 60 days.
To submit: Form in Section 5 or [email protected].
Florida — FDBR (Fla. Stat. §501.71 et seq.)
Effective: July 1, 2024
Applicability note: The FDBR applies to controllers with annual global revenues exceeding $1 billion. If Lead Cactus LLC does not meet this threshold, Florida residents are not covered by the FDBR. However, all Florida residents may submit privacy requests under our general practices.
Rights (if FDBR applies): Access, delete, correct, portability, opt out of sale, targeted advertising, and profiling for consequential decisions.
Response timeline: 45 days (45-day extension available).
To submit: Form in Section 5 or [email protected].
Oregon — OCPA (Or. Rev. Stat. §646A.570 et seq.)
Effective: July 1, 2024
Rights: Access (including a list of specific third parties to whom personal data has been disclosed), delete, correct, portability, opt out of sale, targeted advertising, and profiling for consequential decisions; appeal.
Response timeline: 45 days (45-day extension available). Appeals within 45 days.
Universal Opt-Out: We honor GPC signals for Oregon residents.
To submit: Form in Section 5 or [email protected].
Montana — MTCDPA (Mont. Code Ann. §30-14-3001 et seq.)
Effective: October 1, 2024
Rights: Access, delete, correct, portability, opt out of sale, targeted advertising, and profiling for consequential decisions; appeal.
Response timeline: 45 days (45-day extension available). Appeals within 60 days.
To submit: Form in Section 5 or [email protected].
All Other U.S. States
Additional active state privacy laws include Delaware (DPDPA, Jan 1, 2025), Iowa (ICDPA, Jan 1, 2025), Indiana (INCDPA, Jan 1, 2026), Kentucky (KCDPA, Jan 1, 2026), Maryland (MODPA, Oct 1, 2025), Minnesota (MNDPA, Jul 31, 2025), Nebraska (NDPA, Jan 1, 2025), New Hampshire (NHPA, Jan 1, 2025), New Jersey (NJDPA, Jan 15, 2025), Tennessee (TIPA, Jul 1, 2025), and others. We honor privacy requests from residents of all U.S. states under the rights described in Section 2 to the extent required by applicable law.
Regardless of your state, you may always:
- Opt out of sharing your information with marketing partners using the form below.
- Request deletion of your information by emailing [email protected].
- Opt out of targeted advertising using the DAA WebChoices tool.
Response timeline: 45 days for all requests, with a possible 45-day extension.
4 Personal Information We Collect and Share
In the preceding 12 months we have collected the following categories from consumers who visited or submitted requests through the Site:
- Identifiers: Name, email address, phone number, IP address, cookie and visitor identifiers.
- Customer records: Mailing address, ZIP code, and project details from quote request forms.
- Internet or network activity: Pages viewed, links clicked, time on site, and interaction data collected via cookies and Google Tag Manager.
- Geolocation data: ZIP code and derived city/state. We do not collect precise GPS-level location.
- Commercial information: Service categories requested and project scope details.
- Inferences: Lead quality scores and service-category matches derived from the above data.
We share identifiers and internet activity with advertising platforms (Meta, Google, TikTok) for targeted advertising purposes. We share contact information and project details with our matched service professionals when you submit a quote request. See our Privacy Policy for the complete disclosure of how we use and share each category.
We do not sell or share the personal information of consumers we know to be under 16 years of age.
5 Submit a Privacy Request or Opt Out
Do Not Sell or Share My Personal Information
Use the form below to opt out of the sale or sharing of your personal information, or to submit any other privacy request.
Submit a RequestYou may also opt out directly with our advertising partners: Meta | Google | TikTok. You may also use the DAA WebChoices tool. We honor Global Privacy Control (GPC) signals as a valid opt-out for California, Colorado, Connecticut, and Oregon residents.
Submit Your Privacy Request
Request Received
We've received your privacy request. Expect a confirmation at the email you provided within 10 business days and a full response within 45 calendar days.
6 Verification and Authorized Agents
To protect your information, we may verify your identity before processing access, deletion, or correction requests — for example by confirming your email address or phone number. We will not require you to create an account to submit a request and will not use verification information for any purpose other than verifying your identity.
You may designate an authorized agent to submit a request on your behalf. Authorized agents must provide a signed written authorization from you. For California requests involving an authorized agent, we may also require direct verification from you.
7 Appeals
If we decline to act on your privacy request, we will inform you of the reason. Where required by applicable law (Virginia, Colorado, Connecticut, Texas, Montana, and others), we will include instructions for appealing our decision. To appeal, reply to our decision email or contact [email protected] with the subject line "Privacy Request Appeal." We will respond within the timeframe required by your state's law (typically 45–60 days).
If you remain unsatisfied after appeal, you may contact your state attorney general's office. A directory of state AGs is available at naag.org/find-my-ag.
8 Contact
Privacy Office — Lead Cactus LLC
21218 St Andrews Blvd #237, Boca Raton, FL 33433
General privacy requests: [email protected]
Opt-out requests: [email protected]
Online form: quotehomepros.com/ccpa/