Overview
This Data Subject Rights Request Procedure ("Procedure") describes how to exercise privacy rights provided under U.S. state privacy laws, the GDPR, the UK GDPR, and other applicable privacy regimes. It is published in support of and consistent with our Privacy Policy.
Recognized Rights
| Right | Description | Source |
|---|---|---|
| Access / Know | Confirmation of processing and a copy of the data. | CCPA, VCDPA, CPA, CTDPA, UCPA, TDPSA, GDPR Art. 15. |
| Correction | Rectify inaccurate Personal Information. | CCPA, GDPR Art. 16. |
| Deletion / Erasure | Delete Personal Information subject to legal-hold exceptions. | CCPA, GDPR Art. 17. |
| Portability | Receive data in a structured, machine-readable format. | CCPA, GDPR Art. 20. |
| Opt Out of Sale / Share / Targeted Advertising | Direct us not to sell or share data for cross-context behavioral advertising. | CCPA, VCDPA, CPA, CTDPA, UCPA. |
| Limit Use of Sensitive Personal Information | Restrict use of SPI to disclosed purposes. | CCPA. |
| Object / Restrict | Object to processing or request restriction. | GDPR Arts. 18, 21. |
| Withdraw Consent | Where consent is the basis, withdraw at any time without affecting prior processing. | GDPR Art. 7. |
| Appeal | Appeal a denied request. | VCDPA, CPA, CTDPA, UCPA. |
| Complaint | Lodge a complaint with a regulator. | State AGs; EDPB; ICO. |
How to Submit a Request
- Email: contact@marcusnaulin.com with subject line "Privacy Rights Request."
- Telephone: (805) 377-5626, leaving your name, callback number, and the right(s) you wish to exercise.
- Postal mail: Address listed in "Contact Us."
- Authorized agent: A person authorized in writing may submit on your behalf with proof of authorization and your verification of identity.
Verification
To protect your data, we verify the identity of every requester using the minimum information reasonably necessary, typically two or three pieces of information that match what we have on file (e.g., name, email address, phone number, last four digits of an identifier we already hold). For requests involving Sensitive Personal Information or deletion of complete records, we may require additional verification including a signed declaration under penalty of perjury.
Response Times
| Jurisdiction | Confirmation | Substantive Response | Extension |
|---|---|---|---|
| California | 10 business days | 45 calendar days | +45 calendar days, with notice |
| Virginia, Colorado, Connecticut, Utah, Texas | None statutory | 45 calendar days | +45 calendar days |
| EU/UK GDPR | Reasonable | 1 month | +2 months for complex requests |
Free of Charge; Excessive Requests
We do not charge for honoring privacy-rights requests. Where a request is manifestly unfounded, excessive, or repetitive, applicable law permits us to charge a reasonable fee or refuse the request, with reasoned written justification.
Appeals
If we decline a request, you may appeal by replying to our denial notice or contacting us through any channel above. We will issue a written response within sixty (60) days, including the reasons for our decision. If unsatisfied, you may contact your state attorney general or, where applicable, a supervisory authority.
Recordkeeping
We maintain records of requests received, our verification process, our responses, and any appeal for at least twenty-four (24) months, or longer where legally required.
Contact Us
Marcus Naulin — Mortgage Planner & Real Estate Pro
Direct: (805) 377-5626
NMLS#: 469645 | DRE#: 01322846
Email: contact@marcusnaulin.com
Website: https://marcusnaulin.com
To exercise privacy rights, request records, opt out of communications, or ask any question about this policy, contact us through any channel above. We respond to written requests within thirty (30) days where feasible, and within statutorily mandated timeframes where shorter periods apply.
