Highly compliant with CTDPA requirements, offering clear, actionable rights to access, correct, delete, and port data, alongside granular opt-outs for targeted advertising and data sales. Lacks broader security breach commitments or explicit cross-border transfer disclosures.