Zuma Internet — State Privacy Rights Supplement

Effective Date: September 3, 2026 Last Updated: September 3, 2026

This supplement is part of the Zuma Internet Privacy Policy. It describes additional rights and disclosures that apply to residents of specific states. Where this supplement conflicts with the main policy, this supplement controls for residents of the state in question.

Find your state below. If your state is not listed, the rights in Section 10 of the main policy still apply to you — Zuma extends the core rights to all customers regardless of where you live.

States covered in this supplement: Minnesota

States where Zuma operates: Minnesota, Idaho, Wisconsin

MINNESOTA

Minnesota has two separate privacy laws that matter to internet customers. Zuma complies with both.

A. Minnesota Internet Privacy Act (Minn. Stat. §§ 325M.01–.09)

This law applies to every internet service provider serving Minnesota consumers, regardless of company size. It gives you specific protections that go beyond what most privacy laws require.

What it protects. Under Minnesota law, your “personally identifiable information” as an internet customer includes:

your physical address, email address, or telephone number;
the fact that you requested or obtained specific services from Zuma;
internet or online sites you visited; and
the contents of your data-storage devices.

Our commitment. Zuma does not knowingly disclose this information about Minnesota consumers except in the specific circumstances Minnesota law requires or permits.

When Minnesota law requires us to disclose. We must disclose your personally identifiable information when we receive:

a grand jury subpoena;
a request from an investigative or law enforcement officer acting as authorized by law;
a court order in a civil proceeding, on a showing of compelling need that cannot be met another way;
a court order in a civil action Zuma brings to collect unpaid fees — and then only to the extent needed to establish the delinquency, with safeguards against further disclosure;
a written or electronic request from you, for your own information (we may charge no more than our actual cost of retrieving it);
a subpoena, including an administrative subpoena, issued under state or federal law; or
a warrant or court order.

When we may disclose. We may disclose personally identifiable information:

where the disclosure is incident to Zuma’s ordinary course of business — which Minnesota law defines narrowly as debt collection, order fulfillment, request processing, or transfer of ownership;
to another internet service provider, to report or prevent violations of a published acceptable use policy or customer service agreement (that provider is then bound by the same restrictions); or
to anyone you authorize.

Your authorization. Your Zuma [Terms of Service / Master Service Agreement] contains a conspicuous provision explaining how authorization to disclose your personally identifiable information is obtained. Any request for your authorization will describe the types of recipients and the anticipated uses of the information. You may withdraw authorization at any time by contacting contact@zumainternet.com.

Security. Minnesota law requires Zuma to take reasonable steps to maintain the security and privacy of your personally identifiable information. Our safeguards are described in Section 11 of the main policy.

Your remedy. If Zuma violates this law and you prevail or substantially prevail in an action, Minnesota law entitles you to the greater of $500 or your actual damages, and a court may award costs and reasonable attorney fees. Before filing, we would appreciate the chance to make it right — contact contact@zumainternet.com or contact@zumainternet.com.

Access to your own information. You may request a copy of the personally identifiable information Zuma holds about you in writing or electronically at contact@zumainternet.com. Zuma does not charge for this. [Minnesota permits a fee up to actual retrieval cost; Zuma waives it.]

B. Minnesota Consumer Data Privacy Act (Minn. Stat. §§ 325M.10–.21)

Zuma is a small company. We do not currently meet the size thresholds that trigger the Minnesota Consumer Data Privacy Act, which reaches businesses handling the personal data of 100,000 or more Minnesota consumers.

We extend these rights to our Minnesota customers anyway. We would rather give you the protections the law contemplates than tell you that you are not entitled to them yet.

As a Minnesota resident, you may:

Confirm and access — find out whether we are processing your personal data and see the categories we hold;
Correct — fix inaccurate information;
Delete — have your personal data deleted;
Port — receive data you provided to us in a portable, readily usable format;
Opt out — of targeted advertising, sale of your personal data, and profiling that furthers decisions with legal or similarly significant effects;
Question profiling — if a profiling decision produced a legal or similarly significant effect, ask why, learn what you might have done differently, review the data used, and have the decision re-evaluated on corrected data;
Get a list of third parties — request the specific third parties to which we disclosed your personal data.

On the opt-out rights, specifically. Zuma does not sell personal data. Zuma does not use targeted advertising. Zuma does not make automated decisions that determine whether you get service or what you pay — there is no credit check, no deposit, and no scoring of any kind. So there is nothing here to opt out of. The rights exist regardless, and we will honor them if any of that ever changes.

Sensitive data. Minnesota treats certain data as sensitive, including data revealing racial or ethnic origin, religious beliefs, health condition, sexual orientation, citizenship or immigration status, biometric or genetic data used to identify you, data about a known child, and specific geolocation. Zuma does not collect sensitive data (see Section 3.3 of the main policy) and does not sell it.

Universal opt-out signals. We honor Global Privacy Control and other approved opt-out preference signals.

Privacy risk assessments. Although not currently required to, we assess the privacy risk of new features that process personal data before we launch them.

How to exercise these rights, timelines, and appeals. See Section 10 of the main policy. Requests are answered within 45 days. Appeals are answered within 45 days, and if we deny your appeal we will tell you how to contact the Minnesota Attorney General.

Minnesota Attorney General Office of the Minnesota Attorney General 445 Minnesota Street, Suite 1400, St. Paul, MN 55101 [Phone / URL — verify before publication]

C. Data Breach Notification

If a breach of security compromises your personal information, Zuma will notify you as required by Minn. Stat. § 325E.61.

IDAHO

Idaho has not enacted a comprehensive consumer privacy law as of September 3, 2026. Idaho customers receive all rights described in Section 10 of the Zuma Internet Privacy Policy.

Idaho breach notification: Idaho Code § 28-51-105.

WISCONSIN

Wisconsin has not enacted a comprehensive consumer privacy law as of September 3, 2026. Wisconsin customers receive all rights described in Section 10 of the Zuma Internet Privacy Policy.

Wisconsin breach notification: Wis. Stat. § 134.98.