This page lets you exercise privacy rights granted by privacy laws around the world, including the EU General Data Protection Regulation (GDPR), UK GDPR, Swiss FADP, California CCPA / CPRA, Colorado, Connecticut, Utah, Virginia, Texas and other US state privacy laws, Canadian PIPEDA + Quebec Law 25, the Australian Privacy Act, and the New Zealand Privacy Act 2020. If you are a Shopper of a Merchant who uses A³, please contact the Merchant first; A³ is a Service Provider / Processor for Shopper data. If the Merchant does not respond, submit here.
1. Your rights
- Right of access / right to know what personal information we hold about you, how we use it, who we share it with, and how long we keep it (GDPR Art 15 / CCPA / PIPEDA / APP 12).
- Right to delete / erasure / "right to be forgotten" personal information we have collected (GDPR Art 17 / CCPA / Quebec Law 25 / APP 11).
- Right to correct / rectify inaccurate personal information (GDPR Art 16 / CCPA / PIPEDA / APP 13).
- Right to data portability — receive your data in a structured, commonly used, machine-readable format (JSON), and where technically feasible, have it transmitted to another controller (GDPR Art 20 / Quebec Law 25).
- Right to restrict processing — temporarily halt processing while accuracy or legal basis is contested (GDPR Art 18).
- Right to object to processing based on legitimate interest (GDPR Art 21).
- Right to withdraw consent at any time, without affecting the lawfulness of prior processing (GDPR Art 7(3)).
- Right to opt out of any sale or sharing of personal information (CCPA). We do neither — this option is acknowledged but takes no operational action.
- Right not to be subject to solely automated decisions producing legal or similarly significant effects (GDPR Art 22). A³ does not make such decisions; you may still request human review of any interaction.
- Right to non-discrimination / non-retaliation — we will not deny service or charge different prices for exercising these rights.
- Right to lodge a complaint with your local supervisory authority (see Privacy Policy §W for a list).
2. Global Privacy Control (GPC)
We honor Global Privacy Control browser signals. Setting GPC on your browser will be treated as a request to opt out of any sale or sharing of personal information.
3. Submit a request
4. Verification
For sensitive requests (right to delete / right to know with specific pieces) we may need to verify your identity. Verification typically involves matching the email address you provide with one associated with a conversation in our records. If we cannot verify your identity we will tell you and offer alternative verification steps.
5. Authorized agents
California residents may submit requests through an authorized agent. The agent must provide written authorization signed by you, and we may verify your identity directly.
6. Response times
We respond to most requests within 30 days. California requests receive an acknowledgement within 10 business days and a substantive response within 45 days (extendable to 90 with notice). Quebec requests receive a response within 30 days. Australian requests within a reasonable time.
7. Contact
Email privacy@triplea.studio.