U.S. States Privacy Notice

Last Modified: May 5, 2026

Introduction

This U.S. States Privacy Notice ("State Notice") supplements the Come and See Foundation, Inc. ("Come and See," "we," "us," or "our") Privacy Policy and describes privacy rights available to residents of certain U.S. states. Capitalized terms not defined here have the meanings given in the Privacy Policy. In the event of a conflict between this State Notice and the Privacy Policy with respect to state-specific rights, this State Notice controls for residents of the covered states.

Who This Notice Applies To

This Notice applies to you if you are a resident of a U.S. state with a comprehensive consumer privacy law, including, as applicable, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Additional state privacy laws may become effective after the date of this Notice; Come and See will honor applicable rights as required by law.

Summary of Your State Privacy Rights

Depending on where you live, you may have some or all of the rights below, subject to the requirements and exceptions of the controlling state statute.

Know and Access - confirm whether we process your personal information and obtain a copy of what we hold about you.
Correct - ask us to correct inaccurate or incomplete personal information.
Delete - ask us to delete personal information we have collected, subject to legal exceptions.
Portability - receive certain personal information in a portable, readily usable format.
Opt Out of Sale or Sharing - opt out of the "sale" or "sharing" of personal information as those terms are defined by state law.
Opt Out of Targeted Advertising - opt out of processing of personal information for targeted advertising.
Opt Out of Profiling - opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.
Limit Use of Sensitive Personal Information - where required, limit our use and disclosure of sensitive personal information to purposes permitted by law.
Consent - grant or withhold consent for processing of sensitive personal information and personal data of known minors, as required by state law.
Withdraw Consent - withdraw consent previously given, without affecting the lawfulness of processing carried out before withdrawal.
Non-Discrimination - exercise your rights without being discriminated or retaliated against.
Appeal - appeal our decision on your request where state law provides.

The Right to Know

You have the right to receive information regarding the categories of Personal Information we collect, sell, disclose, or otherwise share; the sources of Personal Information; the purposes for which we collected it; the third parties and service providers with whom we shared it; the retention period (or criteria for determining retention); and whether we sell or share such data. That information is provided in the Privacy Policy and summarized in the table below. In the preceding 12 months, Come and See has collected the following categories of Personal Information:

Categories of Personal Information We Collect	How We Use Your Personal Information (Business Purpose)	Retention Period or Criteria	Categories of Recipients	Do We Sell or Share?
Personal Identifiers — name, postal address, email, phone, date of birth, account ID, device identifier, IP address, online identifiers	Provide and operate the Services; create and manage your account; process and acknowledge donations; deliver content and recommendations; respond to inquiries; send service messages; send marketing communications (with consent); enable participation in events, livestreams, and forums	For the duration of your account plus the period required to comply with our contractual, tax, accounting, audit, fraud-prevention, security, and dispute-resolution obligations	Service providers and vendors (cloud hosting, analytics, payment processing, communications); 5&2 Studios, Inc. (with consent, for the two purposes described in the Privacy Policy); affiliates; legal/regulatory recipients as required by law	Yes* (with consent, to 5&2 only)
Demographic Information — gender, age, zip code	Confirm eligibility (18+); tailor content; aggregate analytics; comply with legal obligations	For the duration of your account and as required by law	Service providers; affiliates; 5&2 (with consent)	Yes* (with consent, to 5&2 only)
Content Information — viewing history, watch progress, ratings, social posts, email and in-app communications	Provide the Services; recommend content; enable forums, livestreams, and chats; respond to inquiries	For the duration of your account and as required by law	Service providers; affiliates; 5&2 (with consent)	Yes* (with consent, to 5&2 only)
Internet Activity Information — browser type, pages viewed, referring/exit URLs, IP address, device identifiers, app interactions	Detect and prevent security incidents, fraud, abuse, and illegal activity; protect Services and users; improve and develop the Services; perform research and analytics; manage IT systems and policy compliance	Up to 24 months, unless a longer period is required for legal, security, or dispute-resolution purposes	Service providers (analytics, security, hosting); affiliates; 5&2 (with consent)	Yes* (with consent, to 5&2 only)
Geolocation Information — approximate location derived from IP; precise location only with device permission	Provide and localize the Services; security and fraud prevention	For the duration of your account; precise location is retained only as long as reasonably necessary to perform the function for which it was collected	Service providers; affiliates; 5&2 (with consent)	Yes* (approximate only, with consent, to 5&2)
Commercial Information — donation history, transaction records, designations	Process donations; issue receipts and annual giving statements; maintain donor records; comply with tax and accounting law	Periods required by tax, accounting, and audit law (typically 7 years; longer for certain donor records)	Third-party payment processors (e.g., Stripe); service providers; affiliates. Donor information is never sold or shared with any third party for that third party's own purposes	No
Audio/Visual Information — photos, video, or audio you upload or share	Enable participation in livestreams, events, and forums; provide customer service	For the duration of your account and as required by law	Service providers; affiliates	No
Profile Information / Inferences — preferences, interests, content affinities derived from your use of the Services	Personalize the Services and recommendations; develop new features; deliver communications and offers (with consent where required)	For the duration of your account and as required by law	Service providers (analytics); affiliates; 5&2 (with consent)	Yes* (with consent, to 5&2 only)
Sensitive Personal Information — religious or philosophical beliefs (inferred from use of The Chosen content), precise geolocation (only with permission), financial account information for donations	Provide the Services consistent with our religious nonprofit mission; process donations; comply with legal obligations. We use and disclose Sensitive Personal Information only for the purposes permitted under applicable laws.	Limited, short-term retention as reasonably necessary to provide the Services and comply with legal obligations	Service providers; affiliates. Not sold; not shared for cross-context behavioral advertising	No
Donor Information — payment details, gift amount, designation, contact information	Process donations; provide receipts and annual giving statements; maintain tax and audit records; donor stewardship	Retained for periods required by applicable tax and accounting law	Payment processors; service providers; affiliates, all under contract and at Come and See's direction	No

* Come and See does not sell Personal Information to third-party advertisers or ad networks for their own advertising purposes. With your consent, Come and See shares Personal Information with 5&2 Studios, Inc. for (i) joint Chosen-branded marketing and (ii) 5&2 non-Chosen-branded biblical content promotion, as described in the Privacy Policy. Depending on how "sale" and "sharing" are defined under the law applicable to you, these consent-based disclosures may constitute a "sale" or "share." You may opt out — and withdraw consent — at any time by contacting us as described in "How to Exercise Your Rights." Donor Information and Sensitive Personal Information are not sold or shared.

Categories of Personal Information We Collect and Share

The categories of Personal Information we collect, the sources, the purposes for which we use them, the retention periods, the categories of recipients, and whether we sell or share each category are set forth in the Right to Know table above and are further described in the Privacy Policy under "Information We Collect" and "Disclosing and Sharing Your Information."

"Sale" and "Sharing" of Personal Information

Come and See does not sell your personal information to third-party advertisers or ad networks for their own advertising purposes.

With your consent, Come and See shares personal information with 5&2 Studios, Inc. ("5&2") for two purposes: (1) joint Chosen-branded marketing - marketing of The Chosen brand (which Come and See owns) and Chosen-branded content, goods, and services produced by 5&2; and (2) 5&2 non-Chosen-branded biblical content promotion - enabling 5&2 to promote non-Chosen-branded content produced by 5&2 that is similar in biblical nature and of interest to viewers of The Chosen. If you have not provided consent, we do not share your personal information with 5&2 for either purpose, and Come and See does not share your personal information with 5&2 for any marketing or advertising purpose outside these two purposes.

Depending on how "sale" and "sharing" are defined by the privacy law applicable to you, consent-based disclosures to 5&2 for either purpose may constitute a"sale" or "sharing" of personal information. You may exercise your right to opt out and withdraw any previously given consent - at any time by contacting us using the information in the "How to Exercise Your Rights" section below.

Donor information is never sold or shared with any third party for that third party's own purposes. Donor information is shared only with vendors, service providers, and affiliates, under Come and See's direction and pursuant to contractual agreements, solely to process and analyze donor information in support of Come and See's operations.

Do Not Sell or Share My Personal Information / Your Privacy Choices. You may exercise your right to opt out of any "sale" or "sharing" of your Personal Information, and to withdraw any previously given consent to share with 5&2, by using the methods in "How to Exercise Your Rights." We honor Global Privacy Control ("GPC") and other recognized universal opt-out mechanisms as a valid request to opt out of sale, sharing, and processing for targeted advertising for the browser or device transmitting the signal, as required by controlling state law.

Sensitive Personal Information

We use and disclose sensitive personal information only for the business purposes of fulfilling our contract with you, providing the Services, or as otherwise required by law. Where state law requires your consent before processing sensitive personal information, we will obtain that consent and honor your choices, and you may withdraw consent at any time.

Minors

Our Services are intended for people 18 and older. We do not knowingly collect personal information from anyone under 18. We do not sell or share personal information of consumers we actually know are under 18 without the affirmative authorization required by applicable law. Come and See has no actual knowledge that it sells or shares the Personal Information of consumers under 16 years of age.

Retention

We retain personal information only as long as necessary for the purposes described in the Privacy Policy or as required by law, including tax, accounting, audit, fraud-prevention, security, and dispute-resolution obligations. Category-level retention periods are set forth in the Right to Know table above.

How to Exercise Your Rights

You may submit a request using any of the following methods:

Email: legal@comeandseefoundation.org with "[Your State] Privacy Request" in the subject line.
Mail: Come and See Foundation, Inc., 9540 Federal Drive, Suite 250, Colorado Springs, CO 80921.
Online: Submit a request via our Contact Us form- please include "[Your State] Privacy Request" in your message.

To help us process your request, please include your name, mailing address, email, state of residence, and a clear description of your request. We will take steps to verify your identity as required by law, and we may decline or limit a request if we cannot verify your identity, the request would affect the privacy or rights of others, or the request is otherwise not required to be honored by law. We will respond within the time required by the controlling statute (generally 45 days, with one extension of up to 45 additional days where reasonably necessary and permitted).

We will not discriminate or retaliate against you for exercising your rights. We generally do not charge a fee unless a request is excessive, repetitive, or manifestly unfounded, in which case we will explain our decision and any fee in advance as permitted by law.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require written authorization signed by you, verification of your identity, and verification of the agent's identity, consistent with applicable law.

Right to Appeal

If we decline to take action on your request in whole or in part, we will inform you of our reasons and, where provided by state law, of your right to appeal. To appeal, email legal@comeandseefoundation.org with "Privacy Appeal - [Your State]" in the subject line. We will respond within the time required by the controlling statute (generally 45-60 days). If your appeal is denied, you may contact your state attorney general as permitted by the controlling statute. Information about who to contact is listed below.

California-Specific Disclosures

Shine the Light. California Civil Code § 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. Come and See does not disclose personal information to third parties for those third parties' own direct marketing purposes.

Notice at Collection. At or before collection, we provide the categories of personal information collected and the purposes of collection as set forth in the Privacy Policy and in this State Notice.

Financial Incentives. Come and See does not currently offer financial incentives in exchange for the collection, retention, sale, or sharing of personal information.

Changes to This State Notice

We may update this State Notice to reflect changes in our practices or applicable law. We will post the updated Notice and revise the "Last Modified" date. Material changes will be accompanied by additional notice as required by law.

Contact Us

Come and See Foundation, Inc., 9540 Federal Drive, Suite 250, Colorado Springs, CO 80921, legal@comeandseefoundation.org.

States with Privacy Appeal Rights

Colorado CPA - Office of the Attorney General - 720-508-6000
Connecticut CTDPA - Office of the Attorney General - 860-808-5318
Delaware DPDPA - Department of Justice, Consumer Protection - 1-800-220-5424 / 302-577-8600
Florida FDBR - Office of the Attorney General - 1-866-966-7226 / (850) 414-3990
Indiana INCDPA - Office of the Attorney General, Data Privacy & Identity Theft Unit - 317-232-6330 / 800-382-5516
Iowa ICDPA - Office of the Attorney General, Consumer Protection - 515-281-5926
Kentucky KCDPA - Office of Data Privacy, Office of the Attorney General - (502) 892-8538
Maryland MODPA - Office of the Attorney General, Consumer Protection - 410-576-6300 / 1-888-743-0023
Minnesota MCDPA - Office of the Attorney General, Data Privacy - 651-296-3353 (metro) / 800-657-3787
Montana MCDPA - Office of the Attorney General, Consumer Protection - 406-444-2026
Nebraska NDPL - Office of the Attorney General - 402-471-2683 / 800-727-6432
New Hampshire NH Privacy Act - Office of the Attorney General, Consumer Protection & Antitrust Bureau - 1-888-468-4454 / 603-271-3658
New Jersey NJDPA - Division of Consumer Affairs, Dept. of Law and Public Safety - 800-242-5846 / 609-984-5828
Oregon OCPA - Department of Justice, Consumer Protection - 1-877-877-9392
Rhode Island RIDTPPA - Office of the Attorney General, Consumer Protection - 401-274-4400
Tennessee TIPA - Office of the Attorney General, Division of Consumer Affairs - 615-741-3491
Texas TDPSA - Office of the Attorney General, Consumer Protection - 512-463-2100
Virginia VCDPA - Office of the Attorney General, Consumer Protection - 1-800-552-9963 / (804) 786-2042