Highly transparent about collected data types and sharing practices, with explicit statements limiting affiliate/nonaffiliate marketing sharing and providing state-specific opt-outs (CA, VT, NV). However, it relies on standard GLBA disclosures that restrict consumer control over everyday business sharing and lacks explicit breach notification commitments or detailed retention schedules.