Privacy Compliance Report for polsia.com

The CCPA/CPRA (Cal. Civ. Code §1798.100 et seq.) requires businesses to provide a privacy policy that discloses: categories of personal information collected, purposes of collection, categories of third parties with whom data is shared or sold, consumer rights (right to know, delete, correct, opt-out of sale/sharing), and retention periods. Meta Pixel deployment constitutes 'sharing' of personal information for cross-context behavioral advertising under CPRA. The complete absence of a privacy policy means none of these mandatory disclosures are made.

California Consumer Privacy Act / California Privacy Rights Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

CCPA/CPRA requires a "Do Not Sell or Share My Personal Information" option. 3 tracker(s) detected without any opt-out control.

Colorado Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

The Colorado Privacy Act (C.R.S. §6-1-1301 et seq.) requires controllers to provide consumers the right to opt out of the processing of personal data for targeted advertising and the sale of personal data. The deployment of Meta Pixel constitutes processing for targeted advertising. The site provides no opt-out mechanism and no privacy notice informing consumers of this right. Colorado also requires recognition of universal opt-out signals (e.g., Global Privacy Control) effective July 2024.

Colorado Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Connecticut Data Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Connecticut Data Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

The Connecticut Data Privacy Act (Conn. Gen. Stat. §42-520 et seq.) requires that personal data collection be limited to what is adequate, relevant, and reasonably necessary for the disclosed purposes. The simultaneous deployment of Google Analytics, Google Tag Manager, and Meta Pixel — without any stated purpose or privacy policy — raises serious data minimization concerns. There is no documentation that the volume of behavioral data collected across three platforms is proportionate to any disclosed business purpose.

Delaware Personal Data Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Delaware Personal Data Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Meta Pixel, classified as an advertising/tracking technology, is loaded on the site without any cookie consent banner or mechanism. Under the ePrivacy Directive (Article 5(3)) and GDPR (Articles 6 and 7), non-essential cookies and tracking technologies require informed, freely given, specific, and unambiguous prior consent before being set. Analytics cookies (Google Analytics) also require consent unless configured in a privacy-preserving, cookieless mode. The complete absence of a consent management platform means every visitor's data is collected unlawfully from the first page load.

Found 3 third-party tracker(s) (Google Analytics, Google Tag Manager, Meta Pixel) but no cookie consent mechanism. GDPR requires explicit opt-in consent before placing non-essential cookies.

The site deploys Google Analytics, Google Tag Manager, and Meta Pixel, all of which transmit personal data (IP addresses, device fingerprints, behavioral data) to servers located in the United States. There is no privacy policy documenting the legal mechanism for these transfers (e.g., Standard Contractual Clauses, adequacy decision, or binding corporate rules). Following the Schrems II ruling (C-311/18), transfers to the US require supplementary measures and a valid transfer impact assessment. The absence of any documented safeguards represents a significant GDPR Chapter V violation.

General Data Protection Regulation requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Found 1 advertising tracker(s): Meta Pixel. Each represents potential data sharing that requires explicit consent under GDPR and a valid legal basis.

Iowa Consumer Data Protection Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Iowa Consumer Data Protection Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Indiana Consumer Data Protection Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Indiana Consumer Data Protection Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Kentucky Consumer Data Protection Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Kentucky Consumer Data Protection Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Montana Consumer Data Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Montana Consumer Data Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Minnesota Consumer Data Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Minnesota Consumer Data Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Maryland Online Data Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

The Maryland Online Data Privacy Act includes heightened protections for minors' data and restricts targeted advertising to individuals under 18. The site markets an AI service ('AI That Runs Your Company') broadly without any age gate, terms of service specifying age requirements, or privacy policy addressing children's data. Without any mechanism to identify or exclude minors, and with Meta Pixel actively profiling all visitors for advertising, the site risks processing minors' data for targeted advertising in violation of MODPA's enhanced protections.

Maryland Online Data Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Nebraska Data Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Nebraska Data Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

New Hampshire Privacy Act (SB 255) requires a clear, accessible privacy policy. No privacy policy link was found on this page.

New Hampshire Privacy Act (SB 255) requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

New Jersey Data Privacy Act (SB 332) requires a clear, accessible privacy policy. No privacy policy link was found on this page.

New Jersey Data Privacy Act (SB 332) requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

The New Jersey Data Privacy Act (SB 332) requires controllers to provide a clear and accessible privacy notice that includes: categories of personal data processed, purposes of processing, how consumers can exercise their rights (access, correction, deletion, opt-out of targeted advertising/sale/profiling), categories of third parties receiving data, and whether data is sold or used for targeted advertising. The complete absence of a privacy policy means NJ consumers are denied all required disclosures. The NJDPA has a notably broad scope with no revenue threshold, increasing the likelihood of applicability.

Oregon Consumer Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Oregon Consumer Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

The Oregon Consumer Privacy Act (ORS §646A.570 et seq.) requires controllers to conduct and document data protection assessments for processing activities that present a heightened risk of harm, including targeted advertising and the sale of personal data. The deployment of Meta Pixel for advertising purposes triggers this requirement. There is no indication that any such assessment has been performed or documented, and the absence of a privacy policy suggests broader governance deficiencies around data protection impact analysis.

Rhode Island Data Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Rhode Island Data Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Texas Data Privacy and Security Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Texas Data Privacy and Security Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Tennessee Information Protection Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Tennessee Information Protection Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Utah Consumer Privacy Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Utah Consumer Privacy Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.

Virginia Consumer Data Protection Act requires a clear, accessible privacy policy. No privacy policy link was found on this page.

Virginia Consumer Data Protection Act requires consumers to opt out of targeted advertising and data sales. Trackers detected without consent controls.