State Specific Privacy Laws
Last Updated: January 23, 2026
Some state's privacy laws require us to provide some additional information to residents of those states, which we provide below.
This table below outlines the categories of personal information we may collect, the sources and recipients of personal information, and the purposes for which we may use personal information (depending on how and why you interact with the Services).
| Personal Information Category | Sources | Purposes | Recipients |
|---|---|---|---|
| Customer Records (e.g., name, address, email address, telephone number, education, donation history) | Information you provide directly or through your interactions with our Services; Third-party providers; Data brokers; Information from our partners | (a) Providing our Services; (b) Improving our Services; (c) Ensuring the security of our Services; (d) Providing technical support; (e) Enabling participation in content offerings; (f) Communicating with you; (g) Personal Information exchanges with Partner Organizations/Sales under applicable state law; (h) Conducting qualitative and quantitative research on behalf of ourself or our customers; (i) Marketing and business development; (j) Exercising/protecting legal rights and complying with legal obligations | Service Providers, Data Brokers, Partner Organizations |
| Characteristics of Protected Classifications Under Applicable Laws (e.g., your gender or citizenship) | Information you provide to us directly; Third-party providers | (a) Processing donations; (b) Enabling quantitative or qualitative research on behalf of ourselves; (c) Marketing and business development; (d) Exercising/protecting legal rights and complying with legal obligations | Service Providers |
| Donation Information (e.g., information regarding donations made and donor) | Information you provide to us directly; Information from Partner Organizations | (a) Providing our Services; (b) Improving our Services; (c) Ensuring the security of our Services; (d) Providing technical support; (e) Communicating with you; (f) Marketing and business development; (g) Personal Information exchanges with Partner Organizations/Sales under applicable state law; (h) Exercising/protecting legal rights and complying with legal obligations; (i) Enabling quantitative or qualitative research; (j) Processing donations | Service Providers; Partner Organizations; Regulatory Agencies |
| Internet or Other Electronic Network Activity Information (e.g., browsing history, search history, and information regarding your interactions with our Services) | Your interactions with our Services; Service providers | (a) Providing our Services; (b) Improving and optimizing our Services; (c) Targeted Advertising; (d) Ensuring the security of our Services; (e) Providing technical support | Service Providers; Partner Organizations |
| Professional or Employment-Related Information / Education information | Information you provide to us directly; Partner Organizations | (a) Providing our Services; (b) Improving our Services; (c) Ensuring the security of our Services; (d) Communicating with you; (e) Personal Information exchanges with Partner Organizations/Sales under applicable state law; (f) Enabling quantitative or qualitative research on behalf of ourselves or our Customers; (g) Exercising/protecting legal rights and complying with legal obligations; (h) Processing job applications | Service Providers; Partner Organizations |
A. Disclosure of Personal Information
We may disclose the personal information identified in the table above to third parties as follows (depending on how and why you interact with the Services):
Service Providers
We may disclose personal information to our service providers in order to have them perform services that assist us in fulfilling the purposes listed above. Our service providers provide us with a range of services including: hosting our Services, processing payments, legal, auditing and accounting professional services, postal and email delivery, conducting analysis to improve our Services, fulfilling requests you make, managing payments, performing identity verification, and answering your questions. We may disclose personal information to our service providers in order to improve our Services, such as to identify bugs, repair errors, or ensure that services function as intended, or conduct internal research and analysis to improve our technology.
Advertising Partners
We may share your personal information with third-party advertising partners. These third-party advertising partners may set Technologies and other tracking tools on our Services to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks. This practice is commonly referred to as "interest-based advertising" or "targeted advertising." To opt out of targeted advertising please contact us at info@garryslist.org.
Other Disclosures
On an ad hoc basis as necessary, we may also disclose personal information to third parties (such as our partners, service providers, and law enforcement and government agencies) to secure our Services and rights and interests of Garry's List and its partners, including to detect, prevent, and investigate security incidents or violations of our Terms of Use or applicable laws, or in the context of legal proceedings. We may also disclose personal information to an acquirer, assignee or other successor entity in connection with a sale, merger, or reorganization of all or substantially all of the equity, business, or assets of Garry's List.
Use of Sensitive Personal Information
Depending on how and why you interact with the Services, some of the personal information that Garry's List may collect or infer and use about you may be considered "sensitive data" or "sensitive data inferences" under Colorado and Oregon law in certain circumstances:
- Demographic information (e.g. racial or ethnic origin);
- Sexual orientation; and
- Citizenship status.
We only collect your sensitive personal information when you voluntarily provide this information to us and provide clear, specific, opt-in consent. If you would like us to limit or stop our use of your sensitive personal information, you may contact us as indicated in the Contact Us section. We will respond to your request as required by applicable laws.
B. Retention of Personal Information
We will delete your information upon your request. We otherwise retain your personal information indefinitely.
C. Privacy Rights
Residents of certain states have certain rights in respect of your personal information under applicable state law. You may not be discriminated against because you exercise your rights under state law. These rights include:
- The right to know what personal information we collect about you, including the categories of personal information, the categories of sources from which the personal information is collected, the purpose for collecting or sharing personal information, and the categories of third parties to whom we disclose personal information.
- The right to have us delete your personal information.
- The right to correct any inaccurate personal information we may have.
- The right to opt out of the sale of your personal data.
- The right not to have "sensitive personal data" processed unless the entity has the resident's clear, specific, opt-in consent.
Certain state residents are also entitled to request and, once a year, obtain free of charge a copy of their personal data that we hold. We do not use any of your Personal Information to engage in targeted advertising online.
Exercising Your Rights
Consistent with applicable law, you may exercise the rights described in this section. Please note that the rights may vary depending on your state of residence. Please see the Region-Specific Terms section below. To exercise your data protection rights please contact us as listed below.
While it is our policy to respect the rights of individuals, please be aware that your exercise of these rights is subject to certain exemptions and exceptions, and some of these rights might be limited (for example the right to withdraw consent) where we are required or permitted by law to continue processing your personal data to deliver services to you, defend our rights or meet our legal and regulatory obligations.
If you contact us to exercise any of these rights, please note that we may only implement requests with respect to the personal data associated with you as an individual. We may also need to verify your identity before implementing your request and will try to comply with your request as soon as reasonably practicable and in accordance with the timelines required under applicable law. If we cannot verify your identity or your ownership rights to the data, we may not be able to service your request until you provide proper documentation.
Right to Appeal
If we deny your request to exercise any of your state privacy rights, you may appeal that decision by contacting us at info@garryslist.org and providing your request and the reason behind your appeal.
Contact Us
If you have any questions about our privacy practices or this Privacy Policy, or to exercise your rights as detailed in this Privacy Policy, please contact us at info@garryslist.org.
See our full Privacy Policy for more information.
Garry's List
560 20th St
San Francisco, CA 94107