Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your personal information (see /data-deletion).
- Restrict certain processing.
- Port your data to another service (machine-readable format).
- Object to processing (especially for direct marketing).
- Withdraw consent at any time (without affecting prior lawful processing).
- Opt out of the sale or sharing of personal information (CCPA).
- Lodge a complaint with your local data protection authority.
How to submit a request
Send an email to privacy@shaartusa.com with the following information:
- Your full name.
- The email address(es) and/or phone number(s) associated with your data.
- The specific right you are exercising (access, correction, deletion, etc.).
- For correction requests: what should be changed and the correct information.
- Any other context that helps us locate your data.
- Proof of identity may be requested before fulfillment (to prevent unauthorized requests).
For deletion requests specifically, you can also use the streamlined form at /data-deletion.
Processing time
- We acknowledge receipt within 5 business days.
- We respond substantively within 30 days (extendable to 60-90 days for complex requests, with notice).
- Requests are free of charge for the first request per year; subsequent or excessive requests may incur a reasonable fee per applicable law.
Identity verification
To protect your data, we may ask for verification before fulfilling certain requests. This may include:
- Confirming details from your account.
- Authenticating through an active session.
- Government-issued ID (for high-sensitivity requests; we delete the ID copy after verification).
Authorized agents
You may designate an authorized agent to submit requests on your behalf. We will require written authorization and identity verification of both you and your agent.
Limitations
We may decline or limit a request when:
- We cannot verify your identity.
- Fulfillment would adversely affect others' rights.
- Retention is required by law (financial records, audit logs).
- The request is manifestly unfounded or excessive.
- The data is controlled by a Customer using our platform (we will forward to them).
If we decline, we will explain why and how you can appeal or file a complaint with your data protection authority.
Non-discrimination
We will not discriminate against you for exercising your privacy rights. Service quality, pricing, and access will not be reduced because you submit a DSAR.
Supervisory authorities
If you believe we have not handled your request appropriately, you may complain to:
- EU/EEA: your national data protection authority (list).
- UK: the Information Commissioner's Office (ico.org.uk).
- Brazil: Autoridade Nacional de Proteção de Dados (anpd.gov.br).
- California: California Privacy Protection Agency (cppa.ca.gov).
- Canada: Office of the Privacy Commissioner (priv.gc.ca).
Customer-controlled data
If your data is controlled by a business using our platform (not us), we will forward your request to them and they will respond directly. The business is the data controller; we are a processor.
Contact
Email: privacy@shaartusa.com
Data Protection Officer: dpo@shaartusa.com