Your data protection rights, and how to exercise them.
Last updated: September 10, 2026
[Your Legal Entity Name] respects your privacy rights under the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA, and similar laws. This page summarises those rights and how to use them. See also our Privacy Policy.
| Right | What it means |
|---|---|
| Access | Confirm whether we process your personal data and receive a copy of it. |
| Rectification | Correct inaccurate or incomplete personal data. |
| Erasure | Ask us to delete your personal data, subject to legal retention obligations. |
| Restriction & objection | Ask us to limit or stop certain processing, including processing based on legitimate interests. |
| Portability | Receive your data in a structured, commonly used, machine-readable format. |
| Withdraw consent | Withdraw any consent you gave at any time, without affecting prior lawful processing. |
| Non-discrimination (CCPA) | We will not deny service or charge different prices because you exercised a privacy right. |
We do not sell or share personal information for cross-context behavioural advertising, and we do not use it for targeted advertising. Because we do not sell data, there is nothing to "opt out" of.
When you use PTO Manager through your employer's workspace, your employer is the data controller for the employment and time-off records you submit, and we act as a data processor on their instructions. In that case, please direct requests to your employer's administrator first — we will assist them in responding.
For your account credentials and your use of our website, we act as the controller.
Email privacy@pto-manager.com with the right you wish to exercise and enough information for us to verify your identity (typically your account email address and workspace name).
Please note: we currently do not offer self-service account deletion in the application. Deletion and export requests are handled manually by our team. We aim to respond within 30 days, and will tell you if we need more time or if an exception (such as a legal retention duty) applies.
Our legal bases for processing are set out in the Privacy Policy. Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses.
If you need a Data Processing Agreement (DPA) for your organisation, contact privacy@pto-manager.com and we will provide one.
If you believe we have handled your data unlawfully, you may lodge a complaint with your local supervisory authority (in the EU/UK) or with the California Privacy Protection Agency (in California). We would appreciate the chance to address your concern first.
Data protection enquiries:
privacy@pto-manager.com
Postal address: [Registered Address]
