Data Protection and Privacy Requests
How to access, correct, export or delete the personal data CRSPoint holds about you.
Who handles requests
Privacy requests are handled by the CRSPoint privacy contact: [add privacy contact and email]. If a dedicated data protection contact is appointed, their details appear here.
What you can ask for
- Access — a copy of the personal data we hold about you.
- Correction — fixing inaccurate or incomplete data.
- Deletion — erasure where we have no legal obligation to retain it.
- Portability — an export in a structured, machine-readable format.
- Objection or restriction — limiting how we use your data.
- Withdrawal of consent — for newsletter email and non-essential cookies.
How to make a request
Email us with the subject line “Privacy request”, the email address you used with CRSPoint, and what you want us to do. We may ask for one piece of confirming information to prevent someone else acting on your behalf. We do not charge a fee for a first request.
Timelines
We acknowledge within 7 days and aim to complete within 30 days. Where a request is complex we will explain the extension and the reason. Canadian law allows up to 30 days with a possible extension; GDPR requests are answered within one month, extendable by two.
Cookies and advertising data
Non-essential cookies only run after consent. You can change or withdraw consent at any time through the Cookie settings link in the footer. Consent records are stored in your browser; our server keeps only aggregate counts unless you contact us directly.
Complaints
If you are unsatisfied, you may contact the Office of the Privacy Commissioner of Canada, or your local supervisory authority if you are in the EEA or the UK. We will cooperate with any regulator enquiry.
Retention summary
Newsletter records: until unsubscribe plus suppression. Server logs: up to 90 days. Comment data: for the life of the article unless you request deletion. Contact emails: two years from last contact unless a legal hold applies.