Data Request (GDPR / CCPA)

1. Who can ask

Anyone whose personal data we might hold: people who've filled in a form, booked a call, worked with us, or visited the site. Your rights come from the Colorado Privacy Act, the California Consumer Privacy Act, and the UK and EU GDPR, depending on where you live. We apply the same process to everyone, wherever you are.

2. What you can ask for

• Access: confirmation of whether we hold your data, and a copy of it.
• Correction: fixing anything inaccurate or incomplete.
• Deletion: erasing your data, except what the law requires us to keep, such as invoices for tax purposes.
• Portability: your data in a format you can take to someone else.
• Restriction or objection: stopping or limiting how we use it, including for marketing.
• Opting out of sale, sharing or targeted advertising. For this browser alone, the Do Not Sell or Share page does it in one click.

3. Verifying it's you

We'll check the request comes from the person the data is about, usually by emailing the address you give in the form. We only ask for what we need to do that, and we use it for nothing else. A request made by an authorised agent needs the person's signed permission.

4. How long it takes

Your confirmation email arrives straight away with a reference number, and we answer in full within 30 days. If a request is unusually complex we may need longer, up to the extension the law allows, and we'll tell you why within the first 30 days. There's no charge, unless requests are clearly excessive or repeated, in which case we'll explain before doing anything.

5. If we say no

We'll explain why in writing. You can appeal by submitting the form again with 'Appeal a decision on an earlier request' and your reference number, and we'll respond within 45 days. If you're still unhappy, you can complain to the Colorado Attorney General, the California Privacy Protection Agency, or your local data protection authority if you're in the UK or EU.