Data Subject Rights

Your Rights

Under applicable data protection laws, you have the right to:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request that we correct inaccurate or incomplete data.
• Deletion — Request that we delete your personal data.
• Restrict Processing — Request that we limit how we use your data.
• Data Portability — Receive your data in a structured, machine-readable format.
• Object — Object to our processing of your data.
• Opt Out of Sale/Sharing — Request that we do not sell or share your data (CCPA).

Response Timeframes

We will acknowledge your request promptly and respond within 30 days (GDPR) or 45 days (CCPA). If additional time is needed, we will notify you with an explanation. Extensions may be up to 60 additional days (GDPR) or 45 additional days (CCPA).

Identity Verification

To protect your privacy, we may request additional information to verify your identity before processing your request. This is to ensure that personal data is not disclosed to unauthorized persons.

Legal Holds & Ethical Obligations

Please note that deletion requests may be denied in whole or in part if your data is subject to a legal hold, ongoing litigation, or if we are required to retain it to comply with legal or ethical obligations under the New York Rules of Professional Conduct.

Non-Discrimination

We will not discriminate against you for exercising any of your data protection rights. You will receive the same quality of service and pricing regardless of your choices (CCPA Section 1798.125).

Supervisory Authority

If you are located in the European Economic Area and are not satisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority. A directory is available at edpb.europa.eu.