Section 11 — Your Privacy Rights

Depending on your location and applicable law, you may have some or all of the following rights.

11.1 Rights Available to All Users

Right to Access. You may request a copy of the personal information we hold about you.

Right to Correction. You may request that we correct inaccurate or incomplete personal information.

Right to Deletion. You may request that we delete your personal information, subject to legal exceptions such as where retention is required by law or necessary to fulfill a contract.

Right to Opt Out of Marketing. You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, by replying STOP to any text message, or by contacting us. Opting out of marketing does not opt you out of transactional or service-related communications.

11.2 Additional Rights for EEA and UK Residents

If you are located in the EEA or the UK, you have the following additional rights under the General Data Protection Regulation or UK GDPR:

Right to Restriction of Processing. You may request that we restrict processing in certain circumstances, such as while we verify the accuracy of data you have contested.

Right to Data Portability. You may receive personal data you provided to us in a structured, commonly used, machine-readable format, and transmit that data to another controller where technically feasible.

Right to Object. You may object to processing based on legitimate interests or carried out for direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

Right Not to Be Subject to Automated Decision-Making. You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, unless necessary for a contract, authorized by law, or based on your explicit consent.

Right to Lodge a Complaint. You may lodge a complaint with a supervisory authority in your country of residence.

11.3 Rights for California Residents

If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

Right to Know. You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collection, and the categories of third parties to whom we disclose it. The categories we collect are set out in Section 2.5.

Right to Delete. You may request deletion of personal information we collected from you, subject to exceptions.

Right to Correct. You may request correction of inaccurate personal information.

Right to Opt Out of Sale or Sharing. We do not sell personal information for monetary consideration. Our use of certain advertising cookies and pixels may constitute sharing for cross-context behavioral advertising. You may opt out by adjusting your cookie preferences, by enabling a Global Privacy Control signal in your browser, or by contacting us.

Right to Limit Use of Sensitive Personal Information. We do not collect sensitive personal information as defined by the CPRA. See Section 2.4.

Right to Non-Discrimination. We will not discriminate against you for exercising your rights. We will not deny you goods or services, charge different prices, or provide a different level of quality because you exercised a privacy right.

11.4 Rights for Residents of Other United States Jurisdictions

Residents of states with comprehensive consumer privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, and others as such laws take effect, have rights that generally include the right to confirm whether we process their personal data, to access it, to correct it, to delete it, to obtain a portable copy, and to opt out of targeted advertising, sale, and certain profiling.

Where required by applicable state law, you also have the right to appeal a decision we make regarding a privacy request. To appeal, reply to our decision or contact us using the details in Section 18 with the subject line "Privacy Appeal." We will respond within the period required by applicable law and, if we deny the appeal, will provide information about how to contact your state attorney general.

11.5 How to Submit a Privacy Request

To exercise any of the rights described in this Section, contact us using the details in Section 18 with the subject line "Privacy Rights Request." Please include your full name, the email address associated with your account, and a description of the right you wish to exercise. California residents should use the subject line "California Privacy Request."

We will respond within the timeframe required by applicable law, generally 45 days, with extensions where permitted.

11.6 Verification of Requests

We are required to verify your identity before acting on a request. To verify your identity, we may:

Ask you to respond from the email address associated with your account

Send a verification code to the email address or mobile number we have on file

Ask you to confirm information about a recent transaction or account activity

We will not act on a request we cannot reasonably verify. Information collected for verification is used only for that purpose.

11.7 Authorized Agents

You may designate an authorized agent to submit a request on your behalf. Where an agent submits a request, we require written permission signed by you authorizing the agent to act, or proof that the agent holds a valid power of attorney. We may also require you to verify your own identity directly with us.