We respect your privacy rights and provide you with reasonable access to and control over your own personal information. Depending on your location and applicable law, you may have some or all of the following rights regarding the personal information we hold about you:

• Right to Access: You have the right to request confirmation of whether we are processing your personal information and, if so, to obtain a copy of the personal data we hold about you. This is sometimes called a data access request. For California residents, the right of access includes the right to request that we disclose certain details about our data practices, including the categories of personal information collected, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share personal information. We will provide the information in a portable and easily accessible format, either to you or (if technically feasible) to a third party at your direction (this fulfills the GDPR “data portability” aspect).
• Right to Rectification: You have the right to request that we correct or update any of your personal information that is inaccurate or incomplete. We encourage you to notify us if any of your information changes or if you believe we have incorrect data. For example, if you have an account, you can update certain information directly by logging in. Otherwise, contact us, and we will make the correction where possible.
• Right to Deletion: You have the right to request the deletion or erasure of your personal data in certain circumstances. For instance, if the data we hold is no longer necessary for the original purpose, or if you withdraw consent (where the processing was based on consent), you can ask that we erase your data. We will honor deletion requests to the extent required by applicable law. Do note that this right is not absolute – sometimes, we must retain certain information to comply with legal obligations or legitimate interests. If that is the case, we will inform you of the specific reasons we cannot fully honor a deletion request (for example, we might retain transaction records as required for tax and accounting purposes despite a deletion request).
• Right to Restrict Processing: You have the right to request that we limit or “pause” the processing of your personal information in certain situations. For example, if you contest the accuracy of your data, you can request a restriction on processing until we verify the data’s accuracy. Or, if you object to our processing based on legitimate interests, you can request restriction pending our review. When processing is restricted, we will still store your data but not use it for the interim except for narrow exceptions (like if needed for legal claims).
• Right to Object: You have the right to object to our processing of your personal information under certain conditions. In particular, you have the absolute right to object to the use of your personal data for direct marketing purposes at any time. For example, if you no longer want to receive marketing emails or newsletters from us, you can opt out (unsubscribe), and we will stop sending them. You also may object when we are processing your data based on a legitimate interest (as our legal basis), and you feel it impacts your rights – we will consider your objection and whether our interests in processing your data remain compelling. If you object to targeted advertising cookies (which involve the processing of your data), you can also utilize the opt-outs described in Cookies & Tracking Technologies above to object to such processing effectively.
• Right to Withdraw Consent: If we rely on consent for any processing of your personal information, you have the right to withdraw that consent at any time. For example, you can withdraw your consent to marketing emails by unsubscribing or withdraw consent to cookies by adjusting your browser settings or using the provided opt-outs. Withdrawal of consent will not affect the lawfulness of any processing conducted prior to the withdrawal, and it will not affect the processing of your data under other legal bases (for instance, we may still process data needed for performing a contract or for compliance with a law).
• Right not to be Subject to Automated Decisions: We do not currently make any decisions that significantly affect you based solely on automated processing (without human involvement). However, if that changes, you would have the right not to be subject to a decision based purely on automated processing that produces legal or similarly significant effects. You would also have the right to human intervention and to contest the decision. (This right primarily applies under GDPR in contexts like credit scoring or profiling decisions; as noted, our processing of your data in the present state does not involve such automated decision-making.)
• California Privacy Rights: If you are a California resident, you have certain additional rights under the CCPA (California Consumer Privacy Act) and CPRA. These include the right to opt out of the “sale” or “sharing” of personal information (as defined by California law), the right to limit the use of sensitive personal information (though we do not collect sensitive personal info as defined in CPRA), and the right to non-discrimination for exercising your privacy rights. We do not sell your personal information and do not share it for cross-context behavioral advertising except in connection with the AdSense cookies (which you can opt out of as described above). If, in the future, we were to engage in any activity deemed a “sale” or “sharing” under California law, we would implement a “Do Not Sell or Share My Personal Information” mechanism on our site to honor California consumers’ choices. We also confirm that we will not discriminate against you (e.g., deny you service or charge a different price) for exercising any of these rights.
• Right to Lodge a Complaint: If you believe we have infringed your privacy rights, you have the right to lodge a complaint with a supervisory data protection authority. For EU/EEA residents, this would be your local Data Protection Authority (DPA) in the country where you live or work or where the issue occurred. For example, in the UK, it’s the Information Commissioner’s Office (ICO). We ask that before lodging any formal complaint, please consider contacting us first so we can address your concerns directly – we take privacy complaints seriously and will do our best to resolve the issue.

Exercising Your Rights: To make any request regarding your personal data (access, correction, deletion, etc.), please contact us using the information in the How to Contact Us section below. Please clearly describe your request – for example, what information you would like to access or which information you want corrected or deleted. For your privacy and security, we will need to verify your identity before fulfilling certain requests (typically by confirming information we already have on file and/or requiring a request from the email associated with your account or purchase). Verification is to ensure we do not disclose or erase someone else’s data improperly. There is no fee for making a request, though if a request is excessive or repetitive, we may charge a reasonable fee or decline to respond as allowed by law. We will respond to legitimate requests within the timeframe required by law – generally within 30 days for most rights or 45 days for California requests (with the possibility of a 45-day extension). If we need an extension or cannot fulfill your request, we will let you know the reason (for example, if we cannot delete data that we must keep for legal reasons, we will inform you).

Opting Out of Marketing: Even if you do not formally exercise a privacy right as described above, you can always control our use of your data for marketing. If you no longer wish to receive our newsletter or promotional emails, you can opt out at any time by clicking the “unsubscribe” link at the bottom of any marketing email we send. Once you opt-out, we will remove you from the mailing list (please allow a short time for the removal to take effect). You may still receive transactional or service emails from us (such as purchase confirmations or responses to customer service inquiries), which are not marketing messages. If you have any issues unsubscribing or you receive unwanted communications from us, please let us know, and we will rectify the situation.

Managing Cookies and Advertisements: As detailed in Cookies & Tracking Technologies, you have choices to manage how cookies collect your data. You can refuse or delete cookies via your browser settings. You can opt out of Google Analytics tracking by installing the opt-out browser add-on. You can opt out of personalized ads from Google by using Google’s Ads Settings or industry opt-out tools. Keep in mind that even after opting out of personalized ads, you may still see ads – they just won’t be tailored using cookies on your browsing behavior. Also, browser cookie preferences are device-specific, so if you clear cookies or switch devices/browsers, you may need to set your preferences again.

We are committed to upholding your rights. If you have any questions about your privacy rights or need assistance exercising them, please contact us.