9. Your Privacy Rights
Depending on where you live, you may have the right to:
- know or access the personal information we hold about you;
- correct inaccurate information;
- delete your information;
- obtain a copy in a portable format;
- opt out of sale, sharing, or targeted advertising (we do none of these);
- withdraw consent where processing is based on consent;
- be free from discrimination for exercising these rights; and
- appeal a denial of a request, where applicable law provides for appeals.
How to exercise them. Email [email protected] or write to the address in Section 12 with the subject “Privacy Request.” We will verify your identity — typically by confirming control of the email address on your account and details of a recent order — and respond within the period required by applicable law (generally 45 days, extendable where permitted). An authorized agent may submit a request with written proof of authorization.
Limits on deletion. We may decline or partially fulfill a deletion request where retention is required for legal, tax, security, or fraud-prevention purposes, or where the information forms part of a permanent Registry Record as described in Section 6. Where we cannot delete, we will explain why and delete or de-identify what we can, such as marketing preferences and account login data.
9.1 California Residents
We collect the categories of personal information identified in Section 1, which correspond to the CCPA/CPRA categories of identifiers, customer records information, commercial information, internet or network activity, and audio/visual information (photographs and video). Sources, purposes, and disclosure recipients are described in Sections 1–3. We have not sold or shared personal information for monetary or other valuable consideration, and have not sold or shared the personal information of minors under 16, in the preceding twelve months.
9.2 EEA and UK Residents
Controller. NFQHA is the controller of the personal data described in this Policy. Contact details are in Section 12. [CONFIRM — a controller established outside the EEA that offers services to individuals in the EEA must ordinarily appoint a representative under Article 27 GDPR, and separately under the UK GDPR. Name the representative(s) here once appointed, or record the basis for relying on the Article 27(2) exemption.]
Legal bases. See Section 2.1.
Your rights. In addition to the rights listed above, you have the right to object to processing based on our legitimate interests, the right to restrict processing, and the right not to be subject to decisions based solely on automated processing producing legal or similarly significant effects. We do not carry out such automated decision-making.
Withdrawing consent. Where we rely on consent — for marketing email, promotional use of photographs, and non-essential cookies — you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
International transfers. NFQHA is based in the United States, and your personal data is processed and stored there and in other countries where our service providers operate. The United States is not the subject of a general adequacy decision. Where we transfer personal data protected by the GDPR or UK GDPR, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or on a certification such as the EU-U.S. Data Privacy Framework where a recipient participates in it. You may request a copy of the relevant safeguards using the contact details in Section 12.
Retention. See Section 6. Note in particular that Registry Records are retained permanently as part of the historical breed record, which limits the right to erasure in respect of those records.
Complaints. You may lodge a complaint with the supervisory authority in your country of residence, place of work, or the place of the alleged infringement. In the United Kingdom this is the Information Commissioner’s Office. We would appreciate the opportunity to address your concerns first.
