Privacy Rights & Regulatory Compliance

Privacy Rights & Regulatory Compliance

Effective Date: [Effective Date]
Last Updated: [Last Updated]

1. Scope

This document supplements the Hestiaa.ai Privacy Policy and describes privacy rights available under applicable data protection laws.

2. Applicable Privacy Laws

  • EU General Data Protection Regulation (GDPR)

  • UK GDPR

  • UK Data Protection Act 2018

  • California Consumer Privacy Act (CCPA)

  • California Privacy Rights Act (CPRA)

  • Virginia Consumer Data Protection Act (VCDPA)

  • Colorado Privacy Act (CPA)

  • Connecticut Data Privacy Act (CTDPA)

  • Utah Consumer Privacy Act (UCPA)

  • Texas Data Privacy and Security Act (TDPSA)

  • Other applicable U.S. state privacy laws

3. GDPR & UK GDPR - Legal Basis for Processing

Where required, we process personal information on one or more of the following legal bases:

  • Performance of a contract

  • Compliance with legal obligations

  • Legitimate business interests

  • Your consent

  • Protection of vital interests

  • Performance of tasks carried out in the public interest (where applicable)

4. International Data Transfers

Where personal information is transferred internationally, we use appropriate safeguards such as Standard Contractual Clauses or other legally recognized transfer mechanisms where required.

5. Your Privacy Rights

  • Access your personal information

  • Correct inaccurate information

  • Delete personal information

  • Restrict processing

  • Object to processing

  • Withdraw consent where applicable

  • Receive a portable copy of your data

  • Lodge a complaint with a supervisory authority

6. California Privacy Rights (CCPA/CPRA)

  • Right to Know

  • Right to Delete

  • Right to Correct

  • Right to Opt-Out of Sale or Sharing

  • Right to Limit Use of Sensitive Personal Information

  • Right to Non-Discrimination

7. Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable state privacy laws. We will honor verified requests where required by law.

8. Identity Verification

Before fulfilling certain requests, we may verify your identity to protect your personal information and prevent unauthorized access.

9. Authorized Agents

Where permitted by law, you may designate an authorized agent to submit requests on your behalf. We may request documentation to verify the agent's authority.

10. Do Not Track Signals

Our website does not currently respond to browser 'Do Not Track' signals unless required by applicable law.

11. Contact for Privacy Requests

  • Email: support@hestiaa.ai

  • Website: https://hestiaa.com

  • Business Address: <placeholder>