Data Subject Rights
Subject to applicable legal limits, individuals may request access to their personal data, correction of inaccurate information, deletion where appropriate, or restriction of processing in relation to a specific record. Where a request cannot be granted in full, the response will state the relevant limitation.
Available rights depend on the nature of the data and applicable law.
Requests and Verification
Requests concerning personal data should identify the relevant interaction or record and provide sufficient information for verification. We may require additional details before acting on a request and may decline or limit a request where retention or disclosure is required by law.
Requests are handled after reasonable verification of identity and scope.
Retention of Data
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, for security and audit purposes, or to comply with applicable legal obligations. When data is no longer required, it is deleted, anonymized, or otherwise disposed of in accordance with internal retention rules.
Retention is governed by operational need, legal obligation, and record management requirements.
Policy Updates
This policy may be updated to reflect operational, technical, or legal changes. The version in force is the one published on the website at the time of review, and users should check the policy periodically for updates.
Revisions take effect when posted unless a different effective date is stated.