1. Submit a request
Email support@xahelo.com with the subject 'Privacy Request.' State the type of request, the email address or account involved, and enough information for Xahelo to locate the relevant records.
Do not include your password, full Social Security number, full payment-card information, bank credentials, or unnecessary government-identification data.
2. Types of requests
- Access or know what personal information Xahelo maintains about you.
- Correct inaccurate account or personal information.
- Delete personal information, subject to lawful exceptions and record-retention obligations.
- Receive a portable copy when required by applicable law and technically feasible.
- Ask about categories of service providers or disclosures.
- Opt out of a sale or sharing practice if Xahelo ever engages in a practice for which applicable law grants that right.
- Limit a sensitive-personal-information use if such a right applies to Xahelo and the processing.
3. Verification
Xahelo may use reasonable, proportionate verification to protect accounts and personal information from fraudulent requests. Verification will depend on the sensitivity of the information and the request.
Verification information is used only as necessary to process the request and related security or legal obligations.
4. Timing
Xahelo aims to acknowledge privacy requests promptly and respond within the time required by applicable law. When the CCPA applies to a verified request, the ordinary statutory response period is 45 days, subject to a permitted extension with notice.
Some records may be retained despite a deletion request when retention is required or permitted for security, fraud prevention, completing a transaction, legal claims, tax/accounting, or another lawful exception.
5. Authorized agents
Where applicable law permits an authorized agent to submit a request, Xahelo may request evidence of the agent's authority and may take reasonable steps to verify the consumer or the authorization.
6. No retaliation for privacy requests
Xahelo will not unlawfully discriminate against a person for exercising an applicable privacy right.