This page supplements our Privacy Policy. It explains the rights you may have over personal information [COMPANY LEGAL NAME] (“Rush Media”) holds about you and how to exercise them. Which rights apply depends on where you live and on our relationship with you.
If we process your information on behalf of one of our clients — for example, you are a customer of a brand we work for — that client controls your information. Please send your request to the client directly. If you send it to us, we will forward it to the client where appropriate and assist them in responding.
Submit a request
Use the form below, or email [EMAIL] with the subject line “Privacy Request.” Submitting a request is free.
Rights for California residents (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, our business or commercial purposes, and the categories of third parties to whom we disclose it;
- Delete personal information we collected from you, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioral advertising;
- Limit the use and disclosure of sensitive personal information to purposes permitted by law. We do not use sensitive personal information to infer characteristics about you; and
- Not be discriminated or retaliated against for exercising any of these rights.
We honor Global Privacy Control (GPC) signals as a request to opt out of sale and sharing for the browser or device sending the signal.
Rights in other U.S. states
Residents of states with comprehensive consumer privacy laws — including Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, and others as new laws take effect — may have the right to confirm whether we process their personal data; to access, correct, delete, and obtain a portable copy of it; and to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. We will apply the rights available under the law of your state of residence.
Rights for Nevada residents
Under NRS 603A.345, Nevada consumers may direct an operator not to sell covered information. We do not sell covered information as defined by Nevada law, but you may submit an opt-out request using the form above or by email, and we will honor it if our practices change. We will respond within 60 days of receiving a verified request, extendable by up to 30 days where reasonably necessary, with notice to you.
Rights in the EEA, UK, and Switzerland (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:
- access your personal data and receive information about how we process it;
- have inaccurate personal data rectified;
- have your personal data erased in certain circumstances;
- restrict processing in certain circumstances;
- receive your personal data in a structured, commonly used, machine-readable format (portability);
- object to processing based on legitimate interests, and to object at any time to direct marketing;
- withdraw consent at any time, without affecting processing that took place before withdrawal; and
- lodge a complaint with your local data protection authority. We would appreciate the chance to address your concerns first, so please contact us.
How we verify requests
To protect your information, we must verify your identity before fulfilling a request to access, correct, delete, or port personal information. We will ask you to confirm information we already hold — typically by responding from the email address associated with your records, and in some cases by confirming additional details. For account holders of a Product, we may ask you to sign in. We will use the information you provide for verification only for that purpose. Opt-out requests do not require verification, but we may deny a request we reasonably believe is fraudulent.
Authorized agents
You may designate an authorized agent to submit a request on your behalf. We will require written, signed permission from you (or a valid power of attorney), and we may ask you to verify your identity directly with us before we act on an agent’s request.
Response times
- California and other U.S. states — we will confirm receipt within 10 business days where required, and respond within 45 days. If we need more time, we may extend once by up to 45 additional days and will tell you why.
- Nevada — within 60 days, extendable by up to 30 days.
- EEA, UK, and Switzerland — within one month, extendable by up to two further months for complex or numerous requests, with notice to you.
If we cannot fulfill a request, we will explain why. We may decline requests that are manifestly unfounded, excessive, or that would require us to disclose other people’s personal information or our trade secrets.
Appeals
If we decline to take action on your request, you may appeal by replying to our decision or emailing [EMAIL] with the subject line “Privacy Request Appeal.” We will respond to your appeal in writing within the period required by your state’s law (generally 45 or 60 days) and explain the reasons for our decision. If your appeal is denied, you may contact your state Attorney General.
Contact
[COMPANY LEGAL NAME]
[ADDRESS]
Email: [EMAIL]