Compliant with international data protection laws

GDPR & CCPA

We are committed to protecting your privacy rights under GDPR, CCPA, and other data protection regulations.

Your Data Protection Rights

Under GDPR and CCPA, you have comprehensive rights over your personal data

Right to Access

You can request a copy of all personal data we hold about you at any time.

Request your data through your account settings or contact us directly.

Right to Rectification

You can update or correct any inaccurate personal information we have.

Update your information directly in your account settings.

Right to Erasure

You can request deletion of your personal data (right to be forgotten).

Delete your account and all data through account settings.

Right to Data Portability

You can export your data in a machine-readable format.

Use our export feature to download all your data as CSV or JSON.

Right to Restrict Processing

You can request that we limit how we process your personal data.

Contact our privacy team to discuss processing restrictions.

Right to Object

You can object to certain types of data processing, including marketing.

Opt out of marketing communications in your account preferences.

Our Compliance Measures

We implement comprehensive measures to ensure compliance with data protection regulations

GDPR Compliance (EU)

  • Lawful basis for data processing
  • Data protection by design and default
  • Data protection impact assessments
  • Appointment of Data Protection Officer
  • Breach notification within 72 hours
  • Cross-border data transfer safeguards

CCPA Compliance (California)

  • Right to know what data is collected
  • Right to delete personal information
  • Right to opt-out of data sales
  • Right to non-discrimination
  • Privacy notice at collection
  • Verifiable consumer requests

How We Ensure Compliance

Technical and organizational measures we implement to protect your data

Data Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256) to protect your information.

Regular Audits

We conduct quarterly security audits and annual compliance reviews to ensure data protection.

Data Processing Agreements

We maintain DPAs with all third-party processors to ensure GDPR compliance throughout our supply chain.

Privacy by Design

Privacy and data protection are built into every feature from the ground up, not added as an afterthought.

Breach Notification

In the unlikely event of a data breach, we will notify affected users within 72 hours as required by GDPR.

Data Minimization

We only collect data that is necessary for providing our services and delete it when no longer needed.

How to Exercise Your Rights

Through Your Account: Most data rights can be exercised directly through your Imprezzle account settings, including data export, account deletion, and preference updates.

Contact Us: For rights that require manual processing or verification, email our Data Protection Officer at privacy@imprezzle.techilio.com with your request.

Response Time: We will respond to all verified requests within 30 days as required by GDPR and CCPA. Complex requests may take up to 60 days with notification.

Verification: To protect your privacy, we may ask you to verify your identity before processing certain requests. This typically involves confirming your email address and account details.

Data Protection Questions?

Our Data Protection Officer is available to answer questions about your rights and our compliance.