Your Privacy Rights

1. Rights you can exercise

• Access & portability — get a copy of the personal data we hold about you in a portable format.
• Correction — fix inaccurate personal data.
• Deletion — request deletion of your personal data, subject to legal retention exceptions.
• Opt out — opt out of any sale or sharing of personal data and of targeted advertising and profiling, where applicable.
• Withdraw consent — withdraw consent you previously gave, including for sensitive or location data.

2. How to make a request

File a request at Privacy requests. You pick what you want us to do before you write anything, and you can add other email addresses, phone numbers, or order references so we can both verify the request is from you and find records that are not filed under your account. You get a reference and the date we must answer by, on screen and by email.

You can also email privacy@repairyour.tech — a request is valid however it reaches us. We will verify your identity before acting on a request.

3. What an export covers

Exports include your account profile, device records, repair and passport history associated with your account, marketplace orders and messages, support tickets, and consent and preference settings. Some records we are legally required to retain (for example, transaction and tax records) may be excluded from deletion.

4. Timing

Access, correction and erasure requests are answered within 30 days (GDPR Art. 12(3)). A deletion request filed under the CCPA/CPRA runs on 45 days (§ 1798.130(a)(2)). The deadline that applies to your request is stored on it and shown on Privacy requests.

Both laws allow one extension for a complex request — 60 further days under the GDPR, 45 under the CCPA/CPRA — but only if we tell you before the original date and give the reasons. That notice fires automatically as the deadline approaches rather than depending on someone remembering, and the extended date replaces the original one on your request.

5. Family, guardian & minors' data

For family and guardian features, the account holder or verified guardian can manage, export, and delete associated profiles, including children's data, and can withdraw location and device-management consent.

6. No retaliation

We will not deny service, charge different prices, or provide a lesser experience because you exercised a privacy right, except where the data is necessary to provide a feature you requested.

7. Appeals & contact

If we decline a request, you may appeal by replying to our decision or emailing privacy@repairyour.tech.