State Privacy Rights
Your privacy rights by state for harper™.
State Privacy Rights
Last updated: September 20, 2026
For Residents of 19 US States: This notice provides information about your privacy rights under comprehensive state privacy laws. As of 2026, consumers in 19 states have specific privacy rights.
Universal Consumer Rights
Across all states with comprehensive privacy laws, consumers have the following core rights:
| Right | Description |
|---|---|
| Right to Know | Request disclosure of what personal information we collect, use, share, and sell |
| Right to Delete | Request deletion of personal information we have collected from you |
| Right to Correct | Request correction of inaccurate personal information |
| Right to Opt-Out | Opt out of the sale or sharing of personal information, and targeted advertising |
| Right to Non-Discrimination | Receive equal service and pricing regardless of exercising privacy rights |
| Right to Appeal | Appeal a denial of your privacy rights request (in some states) |
States with Active Privacy Laws (2026)
| State | Law Name | Effective Date |
|---|---|---|
| California | CCPA/CPRA | Jan 1, 2020 (original) / Jan 1, 2023 (CPRA) |
| Colorado | Colorado Privacy Act (CPA) | July 1, 2023 |
| Connecticut | Data Privacy Act (CTDPA) | July 1, 2023 |
| Delaware | Personal Data Privacy Act | Jan 1, 2025 |
| Florida | Digital Bill of Rights | July 1, 2024 |
| Indiana | Consumer Data Protection Act | Jan 1, 2026 |
| Iowa | Consumer Privacy Act | July 1, 2023 |
| Kentucky | Consumer Data Protection Act | Jan 1, 2026 |
| Maryland | Online Data Privacy Act | Oct 1, 2024 |
| Minnesota | Consumer Privacy Act | July 1, 2025 |
| Montana | Consumer Privacy Act | Oct 1, 2024 |
| Nebraska | Data Privacy Act | July 18, 2026 |
| New Hampshire | Privacy Act | Jan 1, 2025 |
| New Jersey | Data Privacy Act | Jan 15, 2025 |
| Oregon | Consumer Privacy Act | July 1, 2024 |
| Rhode Island | Data Transparency & Privacy Act | Jan 1, 2026 |
| Tennessee | Information Privacy Act | July 1, 2025 |
| Texas | Data Privacy and Security Act | July 1, 2024 |
| Utah | Consumer Privacy Act | Dec 31, 2023 |
| Virginia | Consumer Data Protection Act (VCDPA) | Jan 1, 2023 |
State-Specific Rights
California (CCPA/CPRA)
California residents have the universal rights listed above, plus:
- Right to limit use of sensitive personal information
- Right to restrict data retention to what is reasonably necessary
- Private right of action for data breaches
How to exercise: Visit our California Privacy Rights page or email privacy@hotelhuddle.com.
Colorado, Connecticut, Virginia
Residents of these states have the universal rights listed above, plus:
- Right to opt out of targeted advertising — We do not engage in targeted advertising based on sensitive data
- Right to opt out of profiling — We do not profile consumers for decisions that produce legal or similarly significant effects
How to exercise: Email privacy@hotelhuddle.com with subject line "Colorado/Connecticut/Virginia Privacy Rights."
Delaware, New Hampshire, New Jersey, Oregon
Residents have the universal rights listed above, plus:
- Right to opt out of targeted advertising
- Universal opt-out recognition — We honor Global Privacy Control (GPC) signals where required
How to exercise: Email privacy@hotelhuddle.com or use the GPC browser extension.
Florida (Florida Digital Bill of Rights)
Florida residents have the universal rights listed above. Note that Florida's law applies to businesses with $250M+ annual gross revenue.
How to exercise: Email privacy@hotelhuddle.com with subject line "Florida Privacy Rights."
Indiana, Kentucky, Rhode Island (Effective Jan 1, 2026)
Residents of these states gained comprehensive privacy rights effective January 1, 2026.
How to exercise: Email privacy@hotelhuddle.com with subject line "[State] Privacy Rights."
Iowa, Montana, Tennessee, Texas, Utah
These states have comprehensive privacy laws with varying thresholds.
How to exercise: Email privacy@hotelhuddle.com with subject line "[State] Privacy Rights."
Maryland, Minnesota, Nebraska
Maryland (Oct 1, 2024), Minnesota (July 1, 2025), and Nebraska (July 18, 2026) have comprehensive privacy laws.
How to exercise: Email privacy@hotelhuddle.com with subject line "[State] Privacy Rights."
Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) signal where required by law. When your browser sends a GPC signal, we treat it as an opt-out request for the sale and sharing of personal information.
Browser extensions that support GPC:
Verification and Response Timeline
When you submit a privacy rights request:
- Verification — We will verify your identity using the email address associated with your account or other reasonable methods
- Acknowledgment — We will acknowledge receipt within 5 business days
- Response — We will respond within the timeframe required by your state's law:
- California: 45 days (extendable to 90 days with notice)
- Colorado, Connecticut, Virginia: 45 days
- Other states: 45 days unless otherwise specified
Authorized Agents
Some states (California, Colorado, Connecticut) allow you to designate an authorized agent to submit requests on your behalf. To use an authorized agent:
- Your authorized agent must provide written permission signed by you
- We may require you to verify your identity directly with us
- We may deny a request from an agent who does not submit proof of authorization
Contact Us
If you have questions about your state privacy rights:
Email: privacy@hotelhuddle.com
Subject Line: Use "[Your State] Privacy Rights" (e.g., "California Privacy Rights")
We will acknowledge receipt within 5 business days and respond within 30 days (or as required by your state's law).
Mailing Address:
hotelhuddle
Attn: Privacy Department
5251C Highway 153 PMB 356 Hixson, TN 37343