Privacy Policy - Special Notice for Colorado Residents

Your Colorado Privacy Rights

This Special Notice for Colorado Residents supplements the general Privacy Policy and applies only to individuals who are Colorado residents. This Special Notice is not applicable to Colorado job applicants or personnel.

This notice describes how we collect, use, and share your personal data in our capacity as a “Controller” under Colorado’s Privacy Act (“CPA”) and the rights that you have with respect to your personal data, including sensitive personal data. For purposes of this section, “personal data” and “sensitive data” have the meaning given in the Colorado Privacy Act and do not include information excluded from the CPA’s scope. The personal data we collect about you will depend upon how you interact with our Sites and the information you voluntarily provide us. Accordingly, we may not collect all of the below information about you. In addition, we may receive information about you from other sources (such as firms that use public data to make predictions) or we may collect and/or use additional types of information after providing notice to you and obtaining your consent to the extent such notice and consent is required by the CPA.To the extent that we collect personal data subject to the CPA, that information, our practices, and your rights are described below. Persons with disabilities may obtain this notice in alternative format through any contact method at Accessibility Support.

1. What Personal Data Do We Collect, Process, and Share?

Consistent with the "Information We Collect" and “How We Use Information” sections in the general privacy policy, the below information provides additional detail about certain information that is linked or reasonably linkable to an identified or identifiable individual consumer (“Personal Data”) we process, the purposes for processing this data, and the Personal Data that we share with third parties as defined by the CPA. Please carefully review the general privacy policy for complete information about Kaplan’s data privacy practices.

Personal Data We Collect

Personal data means any information that is linked or reasonably linkable to an identified or identifiable individual. Personal data does not include de-identified data or publicly available information.We collect your name, phone number(s), postal address(es), and email address(es). We collect online activity data, information about products or services purchased or considered, or other purchasing or consuming histories or tendencies to provide you with information, products, or services that you request from us and to improve them.Our service providers collect a bank account number, credit card number, debit card number, or any other financial information you submit to process payment.For state-regulated programs for the profession, we may collect personal data to authenticate your identity when taking examinations as required by the state, such as your Social Security number or driver’s license. We collect information on professional license numbers or membership information, certifications, licenses, or credentials.

Purpose for Processing Personal Data: To fulfill or meet the reason for which the information was provided to us; To provide the services you requested; To manage payments, fees, and charges; To provide you with support and respond to your inquiries, including to investigate and address your concerns; To monitor and improve our responses; To assess the offerings that may assist you in maintaining your professional certification and to report continuing education to the state oversight agency for the profession; To provide you with email alerts, event registrations, and other notices concerning our products or services or events or news that may be of interest to you; To report your attendance, performance, completion data, and proctored testing conditions to state oversight agencies; To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations; To personalize your website experience; To improve and deliver content and product and service offerings relevant to your interests through our website, third-party sites, and via email or text messages; As an education and enablement service provider with consumers from middle school through professional we store this information to optimize your experience with us and assist you in achieving your lifetime and career goals; and Research and development.

Third Parties with Which We Share Personal Data: Service providers such as payment processors; Business partners; State regulators; Courts of law/enforcement; and data analytic, intelligence, and augmentation firms.

Profiling Information We Collect

Profiling Information means any form of automated processing performed on personal data to evaluate, analyze, or predict personal aspects related to an identified or identifiable individual's economic situation, health, personal preferences, interests, reliability, behavior, location, or movements. We may collect information from sources other than you to build a consumer profile of your preferences. We do not profile as defined by the Colorado Privacy Act. Any details about consumer preferences, if compiled, is to understand your preferences for services we offer and not used for any automated decision making that would produce legal or similarly significant effects concerning you.

Purpose for Processing Profiling Information: To determine how best to serve you over your lifetime, how you may achieve success when using our products, and how we may modify our offerings for the success of others.

Third Parties with Which We Share Profiling Information: Kaplan business partners and affiliates.

Sensitive Data We Collect

Sensitive data means personal data that includes data revealing (A) racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life, sexual orientation or citizenship or immigration status, (B) genetic or biometric data for the purpose of uniquely identifying an individual, or (C) personal data from a known child. We may collect age as defined as sensitive data by the CPA. We may collect other demographic information from sources other than you (such as firms that use public data to make predictions). We do not collect personal data from a known child.

Purpose for Processing Sensitive Data: We collect age to comply with the law. We obtain demographic information from sources other than you to further understand our customers and personalize offerings of products or services to optimize your experience with us.

Third Parties with Which We Share Sensitive Data: We do not share Sensitive Data with third parties.

2. What Are My Rights?

Right to Access Information/Correct Inaccurate Personal Data

You have the right to request access to Personal Data collected about you and information regarding the purposes for which we collect it and the third parties and service providers with which we share it. Additionally, you have the right to correct inaccurate or incomplete Personal Data. You may submit such a request as described below.

Right to Obtain a Copy of Personal Data

You have the right to request a copy of the Personal Data that you previously provided to us as controller in a portable format no more than two times per calendar year. Our collection, use, disclosure, and sale of Personal Data is described in our Privacy Policy.

Right to Deletion of Personal Data

You have the right to request in certain circumstances that we delete any Personal Data that we have collected directly from you or from a third party. You may submit such a request as described below. We may have a reason under the law why we do not have to comply with your request or why we may comply in a more limited way than you anticipated. If we do, we will explain that to you in our response.

Right to Opt Out

You have the right to opt out of processing personal data for the purposes of and as defined by the CPA: (A) Targeted Advertising based on your Personal Data obtained from your activities over time and across websites or applications; or (B) The Sale of Personal Data to third parties. We do not profile as defined by the Colorado Privacy Act. You may submit a request to exercise your right to opt out of Targeted Advertising at “Opt Out of Targeted Advertising.“ You may submit a request to opt out of the sale of your Personal Data by Kaplan to third parties by completing the online form “Opt Out of Sale of Personal Data.”

Right to Appeal

If we decline to take action in any request that you submit in connection with the rights described in the above sections, you may ask that we reconsider our response by sending an email to the same email box (referenced in section below) from which you receive the decision. You must ask us to reconsider our decision within 45 days after we send you our decision. You may contact the Attorney General if you have concerns about the appeal.

3. How Do I Exercise My Rights?

You may submit a request to exercise your rights above by completing the online form Submit Privacy Request or, if you prefer to email or phone us, identify the business or Site you interacted with from the list below and then use the associated contact information. If you choose to send an email, please help us locate your data by including information about the website(s) you interacted with when you provided your information and any email address you used to create your account.

Consumer Interaction with Kaplan Test Prep, PMBR, i-Human Patients, Barron’s Educational Series, Manhattan Prep Powered by Kaplan, or Kaplan Medical Prep:

kaptest.compmbr.com
ihuman.com
barronseduc.com
manhattanprep.com
kaplanmedicalprep.com