Privacy Policy

1.1 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below:

• Personal Information means any information relating to an identified or identifiable natural person -- including but not limited to name, email address, phone number, IP address, device identifiers, and location data -- that is collected, stored, used, or processed by Erda Elite Cow Horses LLC in connection with the operation of this website or the provision of services.
• Sensitive Personal Information means Personal Information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a natural person's sex life or sexual orientation. Erda Elite Cow Horses LLC does not intentionally collect Sensitive Personal Information through this website.
• Data Controller means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of Personal Information. For this website, the Data Controller is Erda Elite Cow Horses LLC.
• Data Processor means a natural or legal person who processes Personal Information on behalf of the Data Controller.
• Processing means any operation or set of operations performed on Personal Information, whether or not by automated means -- including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
• Website means the website located at www.erdaelite.mom and all subdomains, pages, and resources accessible through this domain, owned and operated by Erda Elite Cow Horses LLC.
• Services means the computer systems design, computer integrated systems design, infrastructure architecture, technology consulting, and related professional services offered by Erda Elite Cow Horses LLC.
• You or Your means the individual accessing or using the Website, or the company or other legal entity on behalf of which such individual is accessing or using the Website, as applicable.

1.2 Interpretation

Unless the context otherwise requires, words in the singular shall include the plural and vice versa. Headings and subheadings are for convenience only and do not affect the interpretation of this Privacy Policy. References to statutes or regulations include any amendments, extensions, or re-enactments thereof.

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you interact with our Website or communicate with us. This includes information you submit through contact forms, email correspondence, telephone calls, or any other direct communication channel. The specific categories of information we may collect include:

• Identity and Contact Information -- your full name, company name, job title, email address, postal address, and telephone number. We use this to identify you, respond to your inquiries, and maintain our business relationship.
• Professional and Business Information -- details about your organization, your role, the nature of your technology needs, your existing infrastructure, project requirements, budget parameters, and timeline expectations. This information helps us evaluate whether and how we can serve your needs.
• Communication Content -- the substance of any messages, inquiries, project briefs, support requests, proposals, contracts, and feedback you share with us. We retain these records to provide continuity in our service delivery.
• Transactional Information -- details related to payments, invoices, billing addresses, and service agreements when you engage us for professional services. Please note that we do not store full credit card numbers or bank account details on our own servers.

2.2 Information Collected Automatically

When you visit our Website, certain information is collected automatically through standard web technologies and server logs. This information is generally non-identifying but may, in combination with other data, constitute Personal Information under applicable law:

• Log Data -- your IP address, browser type and version, operating system, referring and exit pages, date and time stamps, pages visited, time spent on each page, clickstream data, and other diagnostic information. This is standard server logging that helps us monitor site performance and detect technical issues.
• Device Information -- the type of device you use to access our Website, your device's unique identifiers, hardware model, screen resolution, and mobile network information (if applicable).
• Usage Patterns -- how you navigate and interact with our Website, including scroll depth, mouse movements, button clicks, form interactions, and content engagement metrics. This helps us understand which parts of our site are most useful to visitors.
• Geolocation Data -- approximate geographic location derived from your IP address at the city or regional level. We do not collect precise GPS-based location data through this Website.

2.3 Information We Do Not Collect

We want to be explicit about what we do not collect. We do not knowingly collect, store, or process Sensitive Personal Information (as defined in Clause 1.1) through this Website. We do not purchase or acquire personal data from third-party data brokers. We do not engage in automated profiling that produces legal or similarly significant effects concerning you. We do not collect biometric data, genetic data, or government-issued identification numbers (such as Social Security Numbers) through this Website.

3.1 Direct Collection Methods

We collect Personal Information through the following direct interactions with you:

• Contact and Inquiry Forms -- when you fill out a form on our Website to request information, schedule a consultation, or submit a project brief, we collect the information you enter into that form. Each form clearly indicates which fields are required and which are optional. We only request information that is relevant and proportionate to the purpose of the form.
• Email Correspondence -- when you send an email to any @erdaelite.mom address, we collect your email address, the content of your message, and any attachments you include. Our email systems are hosted on secure, access-controlled servers.
• Telephone Communications -- when you call us at +1 (401) 610-1139, we may record your name, phone number, and a summary of the conversation for quality assurance, training, and service continuity purposes. We do not record the audio content of calls without notifying you in advance.
• In-Person and Virtual Meetings -- when we meet with you (whether physically at our Tooele, Utah office or virtually via video conferencing), we may collect notes, action items, and technical specifications discussed during the meeting.
• Service Agreements and Contracts -- when you engage our Services, we collect the information necessary to formalize our professional relationship, including legal entity details, authorized signatories, scope of work specifications, and payment terms.

3.2 Automated Collection Methods

We collect information automatically through the following technologies:

• Server Logs -- our web servers automatically record information about each request made to our Website. These logs are maintained for diagnostic, security, and performance monitoring purposes and are retained for a limited period as described in Clause 7.
• Cookies -- small text files placed on your device when you visit our Website. For detailed information about the cookies we use, please refer to Clause 10 (Cookies and Tracking Technologies).
• Web Beacons and Pixels -- tiny graphic images embedded in web pages or emails that allow us to track whether a page has been viewed or an email has been opened. We use these sparingly and only for essential analytics purposes.
• Analytics Services -- we may use third-party analytics services (such as Google Analytics) that employ their own cookies and tracking technologies to help us understand Website usage patterns. These services operate under their own privacy policies, which we encourage you to review.

3.3 Information from Third Parties

On rare occasions, we may receive information about you from third parties, such as:

• Referral partners or existing clients who introduce you to our Services
• Publicly available sources such as company registries, professional directories, or your organization's website
• Service providers who assist us with business operations (as described in Clause 6)

When we receive information from third parties, we apply the same protections described in this Privacy Policy.

4.1 Primary Purposes

We use the Personal Information we collect for the following primary purposes, each tied to a specific legal basis (as further detailed in Clause 5):

• Service Delivery -- to provide, maintain, and improve our computer systems design and integrated systems design services. This includes communicating with you about your projects, delivering technical assessments and architecture plans, and fulfilling our contractual obligations.
• Communication -- to respond to your inquiries, provide information you have requested, send administrative messages (such as appointment confirmations, project status updates, and billing notifications), and maintain our business relationship with you.
• Website Operation -- to operate, maintain, monitor, and improve our Website, including diagnosing technical problems, preventing fraudulent or unauthorized activity, and ensuring the security and integrity of our systems.
• Marketing and Business Development -- to send you information about our services, industry insights, case studies, and event invitations that may be relevant to your interests, provided you have consented to receive such communications or where permitted by applicable law.
• Legal Compliance -- to comply with applicable laws, regulations, legal processes, and enforceable governmental requests; to enforce our Terms of Service; and to protect the rights, property, and safety of Erda Elite Cow Horses LLC, our clients, and the public.

4.2 Secondary and Ancillary Uses

In addition to the primary purposes listed above, we may use Personal Information for the following secondary purposes:

• Business Analytics -- aggregating and anonymizing data to analyze trends, measure the effectiveness of our marketing efforts, forecast resource needs, and make data-informed business decisions. When we use data for analytics, we take steps to de-identify it so it can no longer be linked back to you.
• Quality Assurance and Training -- using de-identified interaction records to train our team, refine our service delivery processes, and maintain the high standards of professionalism we are known for.
• Research and Development -- using aggregated, anonymized data to identify emerging technology trends, develop new service offerings, and contribute to industry knowledge through white papers and technical publications (without disclosing any client-specific information).
• Internal Record-Keeping -- maintaining business records for accounting, auditing, tax, and corporate governance purposes as required by law or prudent business practice.

5.1 Overview of Legal Bases

Under applicable data protection laws -- including the General Data Protection Regulation (GDPR) for residents of the European Economic Area and the United Kingdom, and various U.S. state privacy laws -- we must have a valid legal basis for processing your Personal Information. We rely on the following legal bases, depending on the context and purpose of processing:

5.2 Consent

We process certain Personal Information based on your explicit, freely given consent. This applies primarily to marketing communications and certain types of cookies. Where consent is the legal basis, you have the right to withdraw that consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5.3 Contractual Necessity

We process Personal Information where it is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This covers most of our service delivery activities -- when you engage us for computer systems design or integrated systems design, we need to process certain information to fulfill our obligations under that engagement.

5.4 Legitimate Interests

We process Personal Information where it is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include:

• Operating, improving, and securing our Website and IT infrastructure
• Responding to inquiries and providing customer support
• Conducting business analytics to improve our service offerings
• Protecting our legal rights and preventing fraud
• Marketing our services to existing clients and prospective clients who have expressed interest

5.5 Legal Obligation

We process Personal Information where it is necessary to comply with a legal obligation to which we are subject -- for example, retaining financial records for tax purposes, responding to lawful subpoenas or court orders, and complying with reporting obligations under applicable laws and regulations.

5.6 Vital Interests

In rare circumstances, we may process Personal Information to protect the vital interests of any natural person -- for example, in an emergency situation where someone's life or health is at risk.

6.1 General Principle

Erda Elite Cow Horses LLC does not sell, trade, rent, or otherwise disclose your Personal Information to third parties for their own commercial purposes. We share information only as described in this Clause 6 and only to the extent necessary for the specific purpose of the disclosure.

6.2 Service Providers and Subprocessors

We engage third-party service providers to perform functions on our behalf, such as web hosting, email delivery, analytics, payment processing, and cloud infrastructure. These service providers act as Data Processors and are contractually obligated to:

• Process Personal Information only on our documented instructions
• Implement appropriate technical and organizational security measures
• Not retain, use, or disclose Personal Information for any purpose other than providing the contracted services
• Notify us promptly of any data breach or security incident
• Delete or return all Personal Information upon termination of the service agreement

A current list of our primary subprocessors is available upon request by emailing guide@erdaelite.mom. We evaluate all service providers carefully and select only those who demonstrate a commitment to data protection commensurate with our own.

6.3 Legal and Regulatory Disclosures

We may disclose Personal Information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request
• Protect and defend the rights, property, or safety of Erda Elite Cow Horses LLC, our clients, employees, or the public
• Investigate, prevent, or take action regarding suspected fraud, security incidents, or illegal activities
• Enforce our Terms of Service or other agreements

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving Erda Elite Cow Horses LLC, Personal Information may be transferred as part of the business assets. We will notify you via email and a prominent notice on our Website before your Personal Information becomes subject to a different Privacy Policy.

6.5 With Your Consent

We may share your Personal Information with third parties for purposes not covered by this Privacy Policy if you provide your explicit, informed consent for such sharing. You may withdraw that consent at any time.

7.1 Retention Principles

We retain Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. Our retention periods are determined based on the following criteria:

• The nature and sensitivity of the Personal Information
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process the information and whether those purposes can be achieved through other means
• Applicable legal, tax, and regulatory requirements
• The duration of our business relationship with you

7.2 Specific Retention Periods

As a general guide, we apply the following retention periods to different categories of data:

• Client Engagement Records -- retained for the duration of the engagement plus seven (7) years following its conclusion, consistent with standard business record-keeping practices and applicable statutes of limitation for contractual claims.
• Communication Records (emails, messages, inquiry forms) -- retained for three (3) years from the date of last communication, unless they relate to an active or ongoing client engagement, in which case they follow the Client Engagement Records retention period.
• Website Log Data -- retained for a maximum of twelve (12) months, after which it is automatically purged or irreversibly anonymized.
• Marketing Consent Records -- retained for the duration that marketing consent is active plus two (2) years after consent is withdrawn, to maintain an auditable record of consent status.
• Financial and Transaction Records -- retained for seven (7) years to comply with tax and accounting obligations under U.S. federal and state law.

7.3 Data Deletion and Anonymization

Upon expiration of the applicable retention period, we securely delete or irreversibly anonymize Personal Information using methods that prevent reconstruction or re-identification. If you request deletion of your data before the expiration of the retention period (pursuant to your rights under Clause 9), we will comply to the extent that we are not legally required to retain the data.

8.1 Security Measures

Erda Elite Cow Horses LLC implements and maintains technical, administrative, and physical security measures designed to protect Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security framework includes:

• Encryption -- data transmitted between your browser and our Website is protected using Transport Layer Security (TLS) encryption. Data stored on our servers is encrypted at rest using industry-standard encryption algorithms (AES-256 or equivalent).
• Access Controls -- access to Personal Information is restricted to authorized personnel on a strict need-to-know basis. We use role-based access controls, multi-factor authentication, and unique user credentials. Access permissions are reviewed and updated quarterly.
• Network Security -- our infrastructure is protected by firewalls, intrusion detection and prevention systems (IDS/IPS), network segmentation, and continuous security monitoring. We conduct regular vulnerability assessments and penetration testing.
• Physical Security -- our servers and infrastructure are hosted in access-controlled data centers with 24/7 security personnel, biometric access controls, video surveillance, and redundant power and environmental controls.
• Security Policies and Training -- we maintain documented information security policies, conduct regular security awareness training for all personnel, and require all employees and contractors to sign confidentiality agreements.
• Incident Response -- we maintain a documented incident response plan that defines procedures for detecting, containing, investigating, and remediating security incidents. In the event of a data breach, we will notify affected individuals and relevant authorities as required by applicable law.

8.2 No Guarantee of Absolute Security

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your Personal Information. You also play an important role in protecting your data -- we encourage you to use strong passwords, keep your devices and software updated, and exercise caution when sharing personal information online.

8.3 Breach Notification

In the event of a data breach involving your Personal Information that poses a risk to your rights and freedoms, we will notify you without undue delay and in accordance with applicable legal requirements. Our notification will describe the nature of the breach, the categories and approximate number of affected records, the likely consequences, and the measures we have taken or propose to take to address the breach and mitigate its effects.

9.1 Overview of Your Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your Personal Information. Erda Elite Cow Horses LLC is committed to honoring these rights to the extent required by applicable law:

• Right of Access -- you may request confirmation of whether we process your Personal Information and, if so, obtain a copy of that information along with details about how we use it.
• Right of Rectification -- you may request that we correct any inaccurate or incomplete Personal Information we hold about you.
• Right of Erasure (Right to be Forgotten) -- you may request that we delete your Personal Information, subject to certain exceptions (such as legal obligations requiring retention).
• Right of Restriction -- you may request that we limit the processing of your Personal Information under certain circumstances (for example, while we verify the accuracy of disputed data).
• Right of Data Portability -- you may request a copy of your Personal Information in a structured, commonly used, and machine-readable format, and you may request that we transmit that data directly to another controller where technically feasible.
• Right to Object -- you may object to the processing of your Personal Information based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent -- where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.
• Right to Non-Discrimination -- we will not discriminate against you for exercising any of your privacy rights (for example, by denying services, charging different prices, or providing a different level of quality).

9.2 Exercising Your Rights

To exercise any of the rights described above, please contact us using the information in Clause 16. We will respond to your request within the time frame required by applicable law (typically thirty days, extendable by an additional thirty days for complex requests). To protect your privacy, we may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.

9.3 Marketing Opt-Out

You may opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in any marketing email we send, by replying to any marketing email with the word UNSUBSCRIBE in the subject line, or by contacting us directly. Please note that even if you opt out of marketing communications, we may still send you transactional or administrative messages related to your account or ongoing service engagements.

9.4 Complaints to Supervisory Authorities

If you believe that our processing of your Personal Information violates applicable law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We encourage you to contact us first so that we can address your concerns directly.

10.1 What Are Cookies

Cookies are small text files that websites place on your device (computer, smartphone, tablet) when you visit them. Cookies serve various functions -- they help websites remember your preferences, understand how you interact with pages, keep you logged in, and deliver content relevant to your interests. Cookies may be session cookies (which expire when you close your browser) or persistent cookies (which remain on your device until they expire or you delete them).

10.2 Types of Cookies We Use

Our Website uses the following categories of cookies:

• Essential Cookies -- these cookies are strictly necessary for the operation of our Website. They enable core functionality such as security, network management, and accessibility. Our Website cannot function properly without these cookies. They do not require your consent under most data protection laws.
• Performance and Analytics Cookies -- these cookies collect information about how visitors use our Website -- which pages are most frequently visited, how long visitors spend on each page, and whether they encounter any errors. The information is aggregated and anonymized, and we use it solely to improve how our Website works.
• Functional Cookies -- these cookies allow our Website to remember choices you make (such as your language preference or the region you are in) and provide enhanced, more personalized features. They may be set by us or by third-party providers whose services we have added to our pages.

We do not currently use advertising or targeting cookies that track your browsing activity across different websites for the purpose of delivering targeted advertisements.

10.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically configure your browser to block all cookies, delete existing cookies, or notify you when a cookie is being set. The following links provide instructions for managing cookies in popular browsers:

• Google Chrome: Settings -- Privacy and Security -- Cookies and other site data
• Mozilla Firefox: Options -- Privacy and Security -- Cookies and Site Data
• Apple Safari: Preferences -- Privacy -- Cookies and website data
• Microsoft Edge: Settings -- Cookies and site permissions -- Manage and delete cookies

Please note that disabling essential cookies may affect the functionality of our Website and limit your ability to use certain features.

10.4 Do Not Track Signals

Some browsers offer a Do Not Track (DNT) setting that sends a signal to websites indicating that you do not wish to be tracked. There is currently no industry consensus on how websites should respond to DNT signals. Our Website does not currently respond to DNT signals. However, as described above, you can exercise control over tracking through your browser's cookie settings.

11.1 Age Restrictions

Our Website and Services are not directed to or intended for individuals under the age of eighteen (18). We do not knowingly collect, use, or disclose Personal Information from children under the age of sixteen (16). If you are a parent or guardian and believe that your child has provided us with Personal Information without your consent, please contact us immediately using the information in Clause 16.

11.2 Actions Upon Discovery

If we become aware that we have inadvertently collected Personal Information from a child under sixteen (16) without verifiable parental consent, we will take prompt steps to delete that information from our systems and terminate any associated accounts. We will also take reasonable measures to prevent the recurrence of such collection.

11.3 Compliance with COPPA

We comply with the Children's Online Privacy Protection Act (COPPA) and other applicable laws governing the collection of information from minors. Our compliance is based on a good-faith assessment that our Services are directed at a general audience of professionals and businesses and are not targeted at children.

12.1 External Links

Our Website may contain links to third-party websites, plugins, and applications that are not owned or controlled by Erda Elite Cow Horses LLC. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices, content, or security. We encourage you to read the privacy policy of every website you visit.

12.2 Embedded Content

From time to time, our Website may include embedded content (such as videos, images, maps, or articles) from third-party platforms. Embedded content from other websites behaves in the same way as if you had visited the other website directly. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

12.3 Social Media Features

Our Website may include social media features such as share buttons or links to our professional profiles on platforms like LinkedIn. These features may collect your IP address, which page you are visiting on our Website, and may set a cookie to enable the feature to function properly. Your interactions with these features are governed by the privacy policy of the platform providing them.

12.4 Third-Party Payment Processors

When you make payments for our Services, your payment information is processed by third-party payment processors. We do not collect, store, or have access to your full payment card details. The payment processors we engage adhere to Payment Card Industry Data Security Standard (PCI-DSS) requirements, which is the information security standard for organizations that handle credit card information.

13.1 Location of Processing

Erda Elite Cow Horses LLC is headquartered in the United States, at 611 E Erda Way, Tooele, Utah 84074-9736. Our primary data processing activities occur on servers located within the United States. However, certain service providers we engage may process data in other countries. When we transfer Personal Information across international borders, we ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.

13.2 Safeguards for International Transfers

For transfers of Personal Information from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we implement one or more of the following safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner's Office
• Binding Corporate Rules, where applicable
• Certifications under recognized data protection frameworks
• Derogations for specific situations as permitted by applicable law

You may request a copy of the specific safeguards we have implemented for international data transfers by contacting us at guide@erdaelite.mom.

13.3 Compliance with U.S. Federal and State Laws

As a U.S.-based business, we comply with all applicable federal and state data protection laws, including the laws of the State of Utah where we are domiciled. We also endeavor to apply best practices from international frameworks, even where not legally required, as part of our commitment to treating your data with respect.

14.1 California Consumer Privacy Act (CCPA/CPRA)

If you are a resident of California, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), grants you specific rights regarding your Personal Information. Subject to certain exceptions and limitations, California residents have the right to:

• Know -- request that we disclose what Personal Information we collect, use, disclose, and sell (though we do not sell Personal Information). This includes the categories of Personal Information collected, the sources from which it was collected, the business or commercial purpose for collection, and the categories of third parties with whom we share it.
• Access -- request a copy of the specific pieces of Personal Information we have collected about you in the preceding twelve (12) months.
• Delete -- request that we delete Personal Information we have collected from you, subject to certain exceptions (such as completing a transaction, detecting security incidents, or complying with legal obligations).
• Correct -- request that we correct inaccurate Personal Information we hold about you.
• Opt-Out -- direct businesses to stop selling or sharing your Personal Information. As stated throughout this policy, Erda Elite Cow Horses LLC does not sell or share Personal Information as defined under the CCPA/CPRA. Nevertheless, you may submit an opt-out request, and we will honor it and maintain records of your preference.
• Limit Use of Sensitive Personal Information -- direct businesses to limit the use of Sensitive Personal Information. We do not collect Sensitive Personal Information as defined by California law through this Website.
• Non-Discrimination -- receive equal service and pricing even if you exercise your privacy rights. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

14.2 Categories of Personal Information Collected

For California residents, the following is a summary of the categories of Personal Information we have collected in the preceding twelve (12) months, as defined under California law:

• Identifiers -- name, email address, IP address, and similar identifiers. Source: directly from you or automatically through our Website. Purpose: service delivery, communication, and Website operation.
• Commercial Information -- records of services purchased, obtained, or considered. Source: directly from you. Purpose: service delivery, billing, and business analytics.
• Internet or Electronic Network Activity -- browsing history, search history, and interaction with our Website. Source: automatically through our Website. Purpose: Website improvement and analytics.
• Professional or Employment-Related Information -- job title, company name, and industry. Source: directly from you. Purpose: service delivery and relationship management.

14.3 Exercising Your California Rights

To exercise your rights as a California resident, please contact us using the information in Clause 16. We will verify your identity before processing your request, which may require you to provide certain information to confirm that you are the person about whom we have collected Personal Information. You may also designate an authorized agent to make a request on your behalf, provided that the agent has your written permission and can verify their own identity.

14.4 California Shine the Light Law

Under California Civil Code Section 1798.83 (the Shine the Light law), California residents may request information about our disclosure of Personal Information to third parties for their direct marketing purposes. We do not disclose Personal Information to third parties for their direct marketing purposes. If you are a California resident and would like to confirm this or make such a request, please contact us.

15.1 Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal obligations, or for other operational reasons. When we update the policy, we will revise the Last Updated date at the top of this page and in the metadata at the bottom of this document. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15.2 Notification of Material Changes

If we make material changes to this Privacy Policy -- changes that significantly affect how we collect, use, or share your Personal Information -- we will provide more prominent notice. This may include:

• Posting a notice on the homepage of our Website for a reasonable period
• Sending an email to the address we have on file for you (if applicable)
• Requesting your renewed consent where required by law

Your continued use of our Website or Services after the effective date of a revised Privacy Policy constitutes your acknowledgment and, where applicable, acceptance of the updated terms.

15.3 Archived Versions

Upon request, we can provide you with copies of previous versions of this Privacy Policy for your records. For major revisions, we will maintain an archive of prior versions and a summary of the changes made.

16.1 How to Contact Us

Erda Elite Cow Horses LLC is the Data Controller responsible for your Personal Information. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using any of the following methods:

16.2 Data Protection Officer

While we are not legally required to appoint a formal Data Protection Officer (DPO) under the laws applicable to our business, we have designated a privacy contact within our organization who oversees compliance with this Privacy Policy and applicable data protection laws. Inquiries directed to guide@erdaelite.mom with the subject line ATTN: Privacy Officer will receive priority attention.

16.3 Response Time

We strive to acknowledge all privacy-related inquiries within five (5) business days and to provide a substantive response within thirty (30) calendar days. If your inquiry is complex or requires more time to investigate, we will inform you of the delay, explain the reasons, and provide an estimated response timeline.

16.4 Dispute Resolution

If you have a complaint about our handling of your Personal Information that we are unable to resolve to your satisfaction, you may be entitled to:

• Lodge a complaint with the data protection supervisory authority in your jurisdiction
• Seek judicial remedy through the courts of competent jurisdiction
• Pursue alternative dispute resolution mechanisms where available

We encourage you to contact us first so that we can attempt to resolve any concerns directly and amicably. Our commitment to your privacy is fundamental to how we operate, and we take every privacy concern seriously.

16.5 Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Utah and applicable federal laws of the United States, without regard to conflict of law principles, except where the mandatory laws of your jurisdiction require otherwise. Any disputes arising from this Privacy Policy shall be resolved in the state or federal courts located in Utah, unless otherwise required by applicable law.