GDPR & CCPA Privacy
Discover how we safeguard your personal information and uphold your rights under GDPR and CCPA guidelines.
Quick summary
- If you're in the EU/UK, you have rights under the GDPR — access, correction, deletion, portability, objection.
- If you're in California, you have rights under the CCPA — and we don't sell your personal information.
- You can exercise any of these rights by contacting us directly.
This page explains the specific rights available to users in the European Union, United Kingdom, and California under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). It should be read alongside our main Privacy Policy.
Your rights under the GDPR
If you're located in the European Economic Area or the United Kingdom, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), subject to certain exceptions.
- Restrict or object to how we process your data.
- Port your data to another service in a machine-readable format.
- Withdraw consent at any time, where processing is based on consent (such as marketing emails or non-essential cookies).
- Lodge a complaint with your local data protection authority if you believe we've mishandled your data.
Legal basis for processing
We process personal data based on: performance of a contract (running your account or subscription), legitimate interests (keeping the Service secure and improving it), consent (newsletter, non-essential cookies), and legal obligation where applicable.
Your rights under the CCPA
If you're a California resident, you have the right to:
- Know what personal information we collect, use, and disclose.
- Delete personal information we've collected from you, subject to exceptions.
- Opt out of the sale or sharing of your personal information — though we don't sell personal information in the first place.
- Non-discrimination for exercising any of your CCPA rights.
International data transfers
Some of our service providers (hosting, analytics, payments) may process data outside your country. Where this happens, we rely on providers who maintain appropriate safeguards, such as standard contractual clauses.
How to exercise your rights
To exercise any of the rights above, contact us with your request and the email address associated with your use of Toolzin. We'll respond within the timeframe required by applicable law, typically within 30 days.