Depending on your location and applicable data protection laws, you may have certain rights with respect to your personal data. This document outlines the rights available under the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
Rights Under GDPR (EU/EEA Residents)
If you are a resident of the European Union or European Economic Area, you have the following rights under the GDPR:
Right of Access
You have the right to obtain a copy of the personal data Seacrets holds about you, together with information about how we process that data.
Right to Rectification
You have the right to correct inaccurate or incomplete personal data we hold about you.
Right to Erasure ("Right to Be Forgotten")
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary, or when you withdraw consent.
Right to Restrict Processing
You have the right to restrict how Seacrets processes your personal data in certain situations, such as when the accuracy of the data is disputed.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another organization without hindrance from Seacrets.
Right to Object
You have the right to object to the processing of your personal data for direct marketing, profiling, or other purposes on grounds relating to your particular situation.
Right to Not Be Subject to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce a legal or similarly significant effect on you.
Rights Under CCPA/CPRA (California Residents)
If you are a resident of California, you have the following rights under the CCPA and CPRA:
Right to Know
You have the right to request what personal information Seacrets collects, uses, and shares about you.
Right to Delete
You have the right to request deletion of personal information Seacrets has collected about you, subject to certain exceptions.
Right to Correct
You have the right to request that Seacrets correct inaccurate personal information.
Right to Opt-Out of Sale or Sharing of Personal Information
You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
Right to Non-Discrimination
You have the right not to be discriminated against for exercising your privacy rights. Seacrets will not deny you services, charge different prices, or provide different quality of service solely because you have exercised your privacy rights.
How to Exercise Your Rights
You may exercise your rights by contacting Seacrets in the following ways:
- Email: [email protected] — for GDPR and CCPA/CPRA requests
- Data Requests Form: Submit a request through our Data Requests portal at /privacy/data
- Provide sufficient information to verify your identity and to identify the specific personal data at issue
Response Timelines
Seacrets will respond to your request as follows:
- GDPR: Within thirty (30) calendar days of receipt, extendable by two months for complex requests
- CCPA/CPRA: Within forty-five (45) calendar days of receipt, extendable by forty-five (45) additional days if necessary
Limitations
Certain limitations may apply to your rights, including:
- Legal and regulatory retention obligations may prevent complete deletion
- Personal data required for legal defense or regulatory compliance may be retained
- Certain data may be anonymized or de-identified such that it is no longer personal data
- Personal data belonging to third parties cannot be disclosed without their consent