Data Subject Access Request (DSAR)

At Commercify Inc. ("Commercify", "we", "us", or "our"), we are committed to protecting your privacy and ensuring you have control over your personal data. This page explains how you can submit a Data Subject Access Request (DSAR) to exercise your rights under applicable data protection laws, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Your Rights

As a data subject, you may have the following rights concerning your personal data that we process:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data under certain conditions.
• Right to Restrict Processing: You can request that we limit how we process your personal data under certain conditions.
• Right to Data Portability: You can request that we transfer your personal data to another organization, or directly to you, under certain conditions.
• Right to Object: You can object to our processing of your personal data under certain conditions, including for direct marketing purposes.
• Rights related to Automated Decision Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

How to Submit a Request

To submit a Data Subject Access Request, please email our Data Protection Officer at dpo@commercify.com with the subject line "Data Subject Access Request".

In your email, please include the following information to help us process your request efficiently:

• Your full name.
• The email address associated with your Commercify account (if applicable).
• A clear description of your request (e.g., access to data, correction of data, deletion of data).
• Any additional information that may help us identify you or locate your data (e.g., approximate dates of interaction with our services).

Alternatively, you can submit your request by mail to:
Data Protection Officer / Legal Department Commercify Inc. 9931 Corporate Campus Dr., Suite 1400, Louisville, KY 40223 USA

Verification Process

To protect your privacy and security, we will take reasonable steps to verify your identity before processing your request. This may involve asking you to provide additional information to confirm you are the data subject or an authorized representative.

Response Time

We will respond to your request within one month of receipt, as required by applicable data protection laws. If your request is complex or you have made multiple requests, we may extend this period by up to two additional months. We will inform you of any such extension within one month of receiving your request, along with the reasons for the delay.

No Fee Usually Required

You will not usually have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Contact Us

If you have any questions about this DSAR process or how we handle your personal data, please contact our Data Protection Officer at dpo@commercify.com or visit our Privacy Policy for more information.