This policy explains how Blue Mitten Action (“we,” “our,” or “us”) collects, uses, stores, and shares information gathered when you interact with our services (“Services”) — for instance, when you browse our website or engage with our sales, marketing, or event activities.

Please read through this notice to understand your choices and rights. Continued use of our Services signals your agreement with the practices described here. If you’d rather not accept these terms, we ask that you discontinue use of the Services. Questions can be sent to info@bluemittenaction.com.

Quick Overview

Below is a condensed summary — full details for each topic appear in the corresponding section further down.

Information we gather: What we collect depends on how you use Blue Mitten Action and the Services, including any preferences or features you choose.
Sensitive data: We only handle sensitive personal details with your permission or where the law allows it.
Third-party sources: We sometimes receive data about you from outside sources — public records, marketing affiliates, social platforms, and similar channels.
Purpose of processing: Your data helps us run, maintain, and enhance the Services, stay in touch with you, guard against fraud, and satisfy legal requirements. Anything beyond that requires your consent.
Sharing: Certain circumstances and categories of partners may receive your information — details below.
Protection measures: We apply reasonable technical and organizational safeguards, though no online system is completely immune to breach.
Your rights: Depending on your location, applicable law may grant you specific rights over your data.
How to act on those rights: Email us at info@bluemittenaction.com and we’ll respond consistent with relevant data protection rules.

Contents

1. Cookies & Tracking Tools
2. Retention Period
3. Data Security
4. Children’s Privacy
5. Your Privacy Rights
6. Do-Not-Track Signals
7. California Residents
8. Virginia Residents
9. Changes to This Policy
10. Contacting Us

1. Cookies & Tracking Tools

Short version: cookies and similar technology help us collect and remember information.

See our separate Cookie Notice for details on the specific tools we use and how to manage your preferences.

2. Retention Period

Short version: we hold onto data only as long as needed, unless law requires otherwise.

Once there’s no legitimate business reason to keep your data, we delete or anonymize it. If immediate deletion isn’t feasible (e.g., data sitting in backups), we securely isolate it until it can be removed.

3. Data Security

Short version: we use reasonable safeguards, but nothing online is 100% secure.

We’ve put technical and organizational protections in place, but no method of transmission or storage can be guaranteed completely secure. Any data you send us travels at your own risk — please use the Services only in a secure environment.

4. Children’s Privacy

Short version: we don’t knowingly collect information from anyone under 18.

By using our Services, you confirm you’re at least 18. If we discover we’ve unintentionally collected data from someone younger, we’ll deactivate the account and delete the relevant information.

5. Your Privacy Rights

Short version: you can review, update, or close your account whenever you like.

EEA/UK residents: You may lodge a complaint with your local data protection authority if you believe we’ve mishandled your data. Find your authority here.

Switzerland residents: Contact details for your authority are available here.

Withdrawing consent: Where we rely on your consent to process data, you may withdraw it anytime by contacting us (see Section 10). This won’t affect processing that already occurred, or processing based on other lawful grounds.

Marketing opt-outs: Visitors remain anonymous unless they choose to share personal data. You can decline to have non-identifying data collected by following our opt-out process.

Account management: You may request correction or deletion of inaccurate data, and can update your account directly through your account settings. Closing your account triggers deactivation/deletion from active systems, though we may retain limited records for fraud prevention, dispute resolution, or legal compliance.

Cookies: Most browsers accept cookies by default; you can adjust settings to block or remove them, though this may limit some site functionality. To opt out of interest-based ads generally, visit aboutads.info/choices.

Questions about your rights? Email info@bluemittenaction.com.

6. Do-Not-Track Signals

We currently don’t respond to browser Do-Not-Track signals, as no unified technical standard exists yet for interpreting them. If that changes, we’ll update this policy accordingly.

7. California Residents

Short version: California residents have specific statutory rights over their data.

Under California Civil Code §1798.83 (“Shine the Light”), California residents can request — once per year, free of charge — a list of any categories of personal data we’ve disclosed to third parties for direct marketing, along with those parties’ names and addresses. Submit such requests in writing using the contact info in Section 10.

If you’re under 18, live in California, and hold an account with us, you can request removal of content you’ve publicly posted. Contact us with your account email and confirmation of California residency; we’ll suppress public visibility of the content, though complete removal from all backend systems (e.g., backups) isn’t guaranteed.

CCPA Notice

A “resident” under California regulations includes:

Anyone in California other than temporarily, and
Anyone domiciled in California who’s temporarily elsewhere.

Categories of personal data collected in the past 12 months:

CategoryExamplesCollected?A. IdentifiersName, address, phone, IP, email, online ID, account name(fill in)B. CA Customer Records categoriesName, contact info, education, employment history, financial infoYesC. Protected classificationsGender, date of birthNoD. Commercial infoPurchase/transaction history, payment detailsNoE. Biometric dataFingerprints, voiceprintsNoF. Internet/network activityBrowsing/search history, ad interactionsYesG. GeolocationDevice locationYesH. Sensory dataAudio, video, imagesNoI. Professional/employment infoJob title, work history, qualificationsNoJ. Education recordsStudent recordsNoK. InferencesPreference/characteristic profilesYesL. Sensitive personal info—No

Retention for Categories A, B, F, G, and K: as long as operationally necessary.

We may also gather data through customer support interactions, surveys/contests, and service delivery communications.

How we use/share this data: via targeting/marketing cookies and tracking pixels. Opt out anytime by disabling cookies in your Cookie Preference Settings or clicking “Do Not Sell or Share My Personal Information” at the page footer.

Authorized agents submitting requests on your behalf must provide proof of authorization, or we may decline the request.

Disclosures in the past 12 months — shared for business purposes: Categories B, F, G, K. Sold/shared with third parties: Categories A, B, F, G, K, going to ad networks, analytics providers, and retargeting platforms.

Your CCPA rights:

Delete — request deletion, subject to legal exceptions (e.g., free speech protections, compliance obligations, fraud prevention)
Know — learn what we collect, why, whether it’s sold/shared, and to whom
Non-discrimination — we won’t penalize you for exercising these rights
Limit sensitive data use — not applicable, as we don’t process sensitive personal data

Verification: We’ll confirm your identity before acting on a request, generally by matching submitted info against what’s on file, or by contacting you through a previously provided channel. We only use this data for verification and delete any extra info collected for that purpose once verification is complete.

Additional rights: object to processing, request correction, restrict processing, or designate an authorized agent (with proof of authorization).

Reach us at info@bluemittenaction.com with any of the above requests or complaints.

8. Virginia Residents

Short version: Virginia residents have rights under the CDPA.

Under the Virginia Consumer Data Protection Act:

“Consumer” = a Virginia resident acting in a personal/household capacity (not commercial or employment context)
“Personal data” = information linkable to an identifiable person (excludes de-identified or public data)
“Sale” = exchanging personal data for money

Details on what we collect, how we use it, and who we share it with are covered in Sections 1–3 above.

Your CDPA rights:

Confirm whether we’re processing your data
Access your data
Correct inaccuracies
Request deletion
Obtain a copy of data you’ve shared with us
Opt out of targeted advertising, data sales, or profiling with significant legal effects

Blue Mitten Action may sell data or use it for targeted advertising. You can opt out via Cookie Preference Settings, or by contacting us using the details in Section 10.

Authorized agents must provide proof of authorization, or requests may be denied.

Verification & response time: We may request extra info to confirm identity. We’ll respond within 45 days of receiving a request, with a possible 45-day extension (and notice of that extension) if needed.

Appeals: If we deny a request, we’ll explain why. To appeal, email info@bluemittenaction.com. We’ll respond within 60 days with our decision and reasoning. If denied again, you may escalate to the Attorney General.

9. Changes to This Policy

Short version: we may revise this notice periodically.

Updates take effect once posted, marked with a new “Revised” date. Material changes may come with a prominent notice or direct notification. Check back periodically to stay current.

10. Contacting Us

For questions about this policy:

Blue Mitten Action
PO Box 24012
Lansing, Michigan 48909

info@bluemittenaction.com

Effective Date: June 29, 2026