Data Subject Rights Policy

This Data Subject Rights Policy ensures that California residents can exercise their rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). It outlines procedures for managing requests related to personal information collected, processed, or stored by the organization.

Key Highlights:

• Scope: Covers access, deletion, correction, opt-out of sale or sharing, and      limitation on sensitive personal information usage.
• Request Submission: Provides methods for submitting requests, including online forms, email, toll-free numbers, and mail.
• Verification Process: Ensures secure identity verification for data subjects and authorized agents.
• Response Timeframes: Acknowledges requests within 10 business days and completes them within 45 calendar days.
• Compliance and Record Keeping: Maintains records of requests for at least 24 months and documents compliance activities.

This policy supports CCPA/CPRA compliance by empowering data subjects to exercise their rights while ensuring the organization's adherence to legal requirements.