Manage Your Data Rights and Protect Privacy Easily
GDPR (EU) & CCPA (California) Compliance
Your Rights
Under GDPR (for EU residents) and CCPA (for California residents), you have the right to:
- Access - Request a copy of all personal data we hold about you
- Rectification - Correct inaccurate or incomplete data
- Erasure - Request deletion of your personal data
- Portability - Receive your data in a machine-readable format
- Restriction - Limit how we use your data
- Objection - Object to processing for direct marketing
- Withdrawal of Consent - Withdraw consent at any time
How to Exercise Your Rights
Send your request to:
Email: privacy@nebulacomponents.com
Subject line: Data Rights Request - [Your Email]
We verify your identity before processing. Response time: 30 days (GDPR) / 45 days (CCPA).
What We'll Need
- Your email address (used with our services)
- Type of request (access, delete, export, correct)
- Optional: specific data points you're concerned about
Data Retention Periods
| Data Type | Retention | Reason |
|---|---|---|
| Email (audit delivery) | 90 days post-delivery | Follow-up, support |
| Payment records | 7 years | Tax/regulatory |
| Analytics (anonymized) | 26 months | Product improvement |
| Cookie consent | Until withdrawn | Compliance |
Third-Party Services
We use these services with your data:
- Stripe - Payment processing (PCI-DSS compliant)
- SendGrid - Email delivery (transactional)
- Google Analytics - Website analytics (anonymized)
To request deletion from these services, contact us and we'll coordinate on your behalf.