On May 25, 2018, additional features were added to the account center for EU residents in support of the General Data Protection Regulation (GDPR). These features include the ability to:
* Request a copy of your personal data.
* Request account closure.
What is GDPR?
You've heard the acronym and seen plenty of articles about it on the internet, but what is it really? The General Data Protection Regulation (GDPR) is a privacy regulation that affords certain rights to European residents and imposes obligations on companies that do business with European residents. Here's our take on those rights and obligations in our own words.
Transparency or the right for individuals to know what is happening with their personal data
Consent or the right for individuals to choose what personal data is collected about them and to change that choice
Update and Erasure or the right for individuals to update or request deletion of their personal data
Portability or the right for individuals to request a machine readable copy of their personal data
Due Care requires that companies safeguard personal data
Minimization requires that companies only collect personal data that is necessary for its intended purpose
Privacy by Design requires that companies analyze what risks affect personal data and work to minimize those risks
Notification requires that authorities are notified timely of any data breaches that affect personal data
You may request a copy of your personal data in an electronic format that you can take to other service providers.
Subject Access Requests (SARs)
You may request to see whether we are processing your personal data, what personal data is being processed, and for what purpose. You may only request information pertaining to you. You will be asked to verify your identity prior to being provided with the requested information.
To make this request:
1.Submit a request to email@example.com.
2.We will send you a form to complete. The form includes information to verify your identity as well as a place to be specific about what data you would like to see.
3.Return the completed form to firstname.lastname@example.org.
4.Within 30 days of receiving the completed form and verifying your identity, we will collect information that exists and provide it to you in a secure manner.
- You may request to close your account. The following conditions apply:
- All products and services must be cancelled prior to closure. If there are any active products or services in the account, the account cannot be closed.
- All Good As Gold accounts must be closed.
- All In Store Credits will be forfeited.
- You will no longer be able to log into your account after it is closed.
After closure, you will no longer be able to access your account and your account will be unrecoverable. Data that is necessary for the products or services you have purchased may be retained if it is required for our legitimate business purposes or legal or contractual record keeping requirements.